0', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x10020004) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:36:52 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000100)=@x25={0x9, @remote}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/18, 0x12}, {&(0x7f0000000240)=""/76, 0x4c}], 0x4, &(0x7f0000000300)=""/66, 0x42}, 0xc2) recvmsg$unix(r2, &(0x7f0000000540)={&(0x7f0000001680), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001700)=""/105, 0x69}], 0x1, &(0x7f0000001780)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x10002) mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440), 0x100000, &(0x7f0000000480)={'trans=unix,', {[{@version_u}, {@loose}], [{@subj_user={'subj_user', 0x3d, 'fd/3\x00'}}]}}) 12:36:52 executing program 0: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000140)=[{&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f00000000c0)=""/76, 0x4c}], 0x2, &(0x7f0000000180)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f0000000280), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)=""/147, 0x93}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/129, 0x81}, {&(0x7f0000001480)=""/219, 0xdb}], 0x4, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000001680)=""/120, 0x78}, {&(0x7f0000001700)=""/165, 0xa5}, {&(0x7f00000017c0)=""/215, 0xd7}, {&(0x7f00000018c0)=""/131, 0x83}, {&(0x7f0000001980)=""/39, 0x27}, {&(0x7f00000019c0)=""/40, 0x28}, {&(0x7f0000001a00)}, {&(0x7f0000001a40)=""/62, 0x3e}, {&(0x7f0000001a80)=""/195, 0xc3}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0xa, &(0x7f0000002c40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002c80)=""/35, 0x23}, {&(0x7f0000002cc0)=""/9, 0x9}, {&(0x7f0000002d00)=""/75, 0x4b}, {&(0x7f0000002d80)=""/204, 0xcc}, {&(0x7f0000002e80)=""/127, 0x7f}, {&(0x7f0000002f00)=""/249, 0xf9}], 0x6}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003100)=""/152, 0x98}, {&(0x7f00000031c0)=""/117, 0x75}], 0x2, &(0x7f0000003280)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}}], 0x5, 0xc0, 0x0) 12:36:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:36:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651e", 0xa5, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:36:52 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/36, 0x24}], 0x1, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/58, 0x3a}, {&(0x7f0000000280)=""/62, 0x3e}, {&(0x7f0000000100)=""/109, 0x6d}, {&(0x7f0000000180)=""/27, 0x1b}, {&(0x7f00000001c0)}, {&(0x7f00000001c0)=""/186, 0xba}], 0x6, 0x0) 12:36:52 executing program 7: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) 12:36:52 executing program 6: r0 = gettid() r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x3, 0x172}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) rt_sigqueueinfo(r3, 0x32, &(0x7f0000000140)={0x1a, 0xfffff000, 0x9}) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) fork() r5 = dup2(r4, r2) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) recvmmsg$unix(r5, &(0x7f0000000800)=[{{&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000240)=""/14, 0xe}], 0x2}}, {{&(0x7f0000000400)=@abs, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/175, 0xaf}, {&(0x7f0000000680)=""/247, 0xf7}], 0x3, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}], 0x2, 0x0, &(0x7f0000000a00)={0x77359400}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000880)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x1000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x8, 0x3}, 0x40, 0x0, 0x0, 0x6, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r5, 0x12) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c7766646e6f3db2657abc2f4b8e4466447ebb0b7d087cc2085ea0136f93cb1b21345be5aa05727e52dddef404032ac00beddf0d131362bd03d4f545d2174ff567c8ba63c4ea02dd7095585d886407000000000000003a27339648b43e0eae809a02f2e3cbf4dd8554d8c50b8fec72b0ef1dd2cb66bdc98bd5ec3c91f60d002691634268dcd72619f94b3b82bae6859c7e103dbbe5b8465ee5247b873436de02b8dc45fd28f1660000", @ANYRESHEX=r8, @ANYBLOB=',\x00']) ioctl$TIOCSPTLCK(r7, 0x40045431, &(0x7f00000008c0)=0x1) wait4(r1, &(0x7f00000000c0), 0x80000000, 0x0) process_vm_writev(r0, &(0x7f0000000200), 0x64, &(0x7f0000000640)=[{&(0x7f0000000080)=""/25, 0x19}, {&(0x7f0000000000)=""/90, 0x5a}], 0x2, 0x0) [ 1782.899245] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 1782.899245] program syz-executor.3 not setting count and/or reply_len properly 12:36:52 executing program 0: r0 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r2 = gettid() ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, 0xffffffffffffffff, 0x12) clone3(&(0x7f0000000680)={0x100, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340), {0x3}, &(0x7f0000000380)=""/154, 0x9a, &(0x7f0000000440)=""/7, &(0x7f0000000480)=[0x0, 0x0, 0x0, r1], 0x4}, 0x58) capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x6, 0x3}, 0x40949, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r2, 0xa, r5, 0x13) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="46e3cd15f97151012a32706bba0c136266c69a9e5e04329477b8eb8af036df0ab61359317fbc247084c2939d9fa446f441790caadb7df606ef69cc94c36972e9d132a40129dfa16500dfa46d24063bb9a70b869107566e6ed02c"]) kcmp(r1, r2, 0x1, r7, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000000240), 0x4, 0x202000) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) ptrace(0xffffffffffffffff, r0) 12:36:52 executing program 5: getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4088, 0xff8}], 0x1, 0x0) 12:36:52 executing program 2: gettid() ptrace(0x4208, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000180), 0x1}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) capset(&(0x7f0000000100)={0x20071026, r1}, &(0x7f0000000140)={0x3, 0x80000000, 0x10000, 0x2, 0x5, 0x3}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0xb5, 0x0, 0x2000002, 0x0, 0x2}, r0, 0x200000000000000a, r7, 0x12) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/254, 0xfe}], 0x1, &(0x7f0000000640), 0x0, 0x0) 12:36:52 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x10020004) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:36:52 executing program 7: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) 12:36:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) syz_open_pts(0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) dup2(0xffffffffffffffff, r2) [ 1783.208636] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 1783.208636] program syz-executor.3 not setting count and/or reply_len properly 12:37:05 executing program 7: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:05 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651e", 0xa5, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651e", 0xa5, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:05 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001100)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = getpgrp(0x0) process_vm_writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:05 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) gettid() r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x242901) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) gettid() getpid() ptrace(0x10, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) ioctl$SG_GET_KEEP_ORPHAN(r4, 0x2288, &(0x7f0000000480)) fcntl$getownex(r3, 0x10, &(0x7f0000000140)) 12:37:05 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x10020004) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:05 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:05 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0xca6db59a3976b7f0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0x1}, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) tgkill(r1, r0, 0x1e) r5 = gettid() capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000000)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r8 = dup2(r7, r6) write$binfmt_aout(r8, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r8, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r5, 0xa, r8, 0x12) setpgid(r5, r1) 12:37:05 executing program 5: fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="026842780000000000000075"], 0xc, 0x3) ioctl$int_out(0xffffffffffffffff, 0x5460, &(0x7f0000002100)) r0 = getpgrp(0x0) ptrace$setregs(0xf, r0, 0xffffffff, &(0x7f0000001100)="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") process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:05 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:05 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000880}, 0x10020004) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:05 executing program 7: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:05 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) fork() setpriority(0x1, 0x0, 0x8d3) 12:37:05 executing program 5: r0 = getpgrp(0x0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000000)={&(0x7f00000011c0)="63b442813dff395dd50e37f452db0257f87808af3a4b2da21748fbbf365ec843309cb72ae0e5886b6e48a8ab09cdaefe6d3b99e9fa9c0fbd035d0ab2bcf38f9c5469d8c0f007b57e7eb3e9f86bd4e905acb59a2e5171066060d6890c5a8ca1987583577474a9a8ea460685202a5c8c2a09a3a51dd166789d88c8bac75dbf13593f834d4907f112e64fe85b13f05888848c648e387de98c8e08aae0ec8d4a46db3bf20825b2fdc1ab6b16378022ee80ee0658c42c1488cc70094135236c791a7a6f36a19ee6b093ee8ed826449d758389cae220ac", 0xd4}) getpgid(r0) process_vm_writev(r0, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/53, 0x35}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000001100)=""/90, 0x5a}], 0x3, &(0x7f0000000040)=[{&(0x7f0000000100)=""/4088, 0xff8}], 0x1, 0x0) 12:37:05 executing program 1: r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, @out_args}, './file0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:05 executing program 6: r0 = gettid() r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x40143) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) ptrace$setopts(0x4206, r1, 0xad, 0x11) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) 12:37:05 executing program 7: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:05 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:19 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) fork() setpriority(0x1, 0x0, 0x8d3) 12:37:19 executing program 5: r0 = getpgrp(0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) ioctl$SG_IO(r3, 0x2285, &(0x7f00000012c0)={0x53, 0xfffffffffffffffd, 0x0, 0x7, @buffer={0x0, 0xb3, &(0x7f0000001140)=""/179}, &(0x7f0000001200), &(0x7f0000001240)=""/58, 0x7522, 0x4, 0x0, &(0x7f0000001280)}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) move_pages(r1, 0x8, &(0x7f0000000040)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil], &(0x7f00000000c0)=[0x3, 0xcb75], &(0x7f0000001100)=[0x0, 0x0, 0x0], 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:19 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:19 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651e", 0xa5, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:19 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/20, 0x14}, {&(0x7f00000001c0)=""/66, 0x42}, {&(0x7f0000000240)=""/93, 0x5d}], 0x3, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f0000000100)=""/109, 0x6d}], 0x2, 0x0) sched_getscheduler(r0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x191100, 0x1) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r2, 0xa, r5, 0x12) process_vm_writev(r2, &(0x7f0000001700)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/149, 0x95}], 0x2, &(0x7f0000001a00)=[{&(0x7f0000001740)=""/88, 0x58}, {&(0x7f00000017c0)=""/26, 0x1a}, {&(0x7f0000001800)=""/48, 0x30}, {&(0x7f0000001840)=""/145, 0x91}, {&(0x7f0000001900)=""/222, 0xde}], 0x5, 0x0) preadv2(r1, &(0x7f0000000680)=[{&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f00000005c0)=""/88, 0x58}], 0x5, 0xffffffff, 0x6, 0x18) 12:37:19 executing program 1: fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:19 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', 0x0, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:19 executing program 6: r0 = gettid() r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x40143) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) ptrace$setopts(0x4206, r1, 0xad, 0x11) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) 12:37:19 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:19 executing program 7: fork() process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:19 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x11) 12:37:19 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:19 executing program 7: fork() process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:32 executing program 6: r0 = gettid() r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x40143) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) ptrace$setopts(0x4206, r1, 0xad, 0x11) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) 12:37:32 executing program 5: write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@unlock_all, 0xb) getpgrp(0x0) 12:37:32 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x11) 12:37:32 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:32 executing program 7: fork() process_vm_writev(0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:32 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000280)=""/105, 0x69}], 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000010000000200"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x150}, 0x40000000) 12:37:32 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce92", 0xb1, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:32 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) fork() setpriority(0x1, 0x0, 0x8d3) 12:37:32 executing program 7: r0 = fork() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:32 executing program 5: r0 = getpgrp(0x0) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x3, 0x3f, 0x1, 0x46, 0x0, 0x100000000, 0x20041, 0xc, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0xc1, 0x9, 0x9, 0x81, 0x9, 0x8, 0x0, 0x101, 0x0, 0xd0b}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/42, 0x2a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:32 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x98, r2, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x57, 0x44}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e17827887da68a1c"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="07119b0d1d96b50fff50fb36ca20f94e7f7db696c719ea46"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xa39}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="e917c80e6f945d413a9bfd6cc5bfcdd4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "887c212c67872c8e"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "4b8a7db22d5d7012"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x400c020) r3 = getpgrp(0x0) process_vm_writev(r3, &(0x7f0000000040)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1000000000000188, &(0x7f0000002480)=[{&(0x7f0000001100)=""/4112, 0x1000}], 0x1, 0x0) 12:37:32 executing program 2: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) kcmp(0x0, r4, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) syz_io_uring_setup(0x3d5d, &(0x7f0000000100)={0x0, 0xfe6c, 0x20, 0x0, 0x1cb}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000200), 0x3f) [ 1823.626827] cgroup: fork rejected by pids controller in /syz7 12:37:32 executing program 6: perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2b) r1 = epoll_create(0xdc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = pidfd_getfd(r2, r3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r9, {0xae}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, 'rfdno'}}]}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000000}) 12:37:32 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:32 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x11) 12:37:44 executing program 6: r0 = fork() waitid(0x0, r0, 0x0, 0x2, 0x0) 12:37:44 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce92", 0xb1, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:44 executing program 2: r0 = gettid() ptrace(0x4207, r0) process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) getpgrp(r0) 12:37:44 executing program 7: r0 = fork() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) fork() setpriority(0x1, 0x0, 0x8d3) 12:37:44 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x11) 12:37:44 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)=""/207, &(0x7f0000000200)=0xcf) 12:37:44 executing program 5: r0 = getpgrp(0x0) gettid() process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:44 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) tgkill(r0, 0x0, 0x11) 12:37:44 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, &(0x7f0000000200)) 12:37:44 executing program 2: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x1f, 0x101000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x3, 0x42, 0x8, 0xb3, 0x0, 0x1, 0x4000, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7ff, 0x1, @perf_bp={&(0x7f0000000080), 0x2}, 0x418d, 0x6, 0x3, 0x7, 0x2, 0x76, 0x200, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r0, 0xa) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) gettid() 12:37:44 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000002840)=0x0) r5 = getpgrp(r4) r6 = perf_event_open(&(0x7f0000002780)={0x0, 0x80, 0xfc, 0x0, 0x20, 0x0, 0x0, 0x10001, 0x4008, 0xb, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb, 0x0, @perf_config_ext={0x3f, 0x7fff}, 0x800, 0x9, 0x4, 0x7, 0xe76, 0x7, 0x6, 0x0, 0x400, 0x0, 0x6}, r5, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000002700)={0x0, 0x80, 0x4, 0x79, 0x8, 0x67, 0x0, 0x5, 0x93542, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f00000010c0)}, 0x800, 0x7, 0x9, 0x8, 0x1000, 0xc26, 0x7fff, 0x0, 0x7ff, 0x0, 0x3}, r5, 0x7, r6, 0xb) process_vm_writev(r5, &(0x7f0000002640)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/18, 0x12}, {&(0x7f0000001040)=""/97, 0x61}, {&(0x7f0000002140)=""/225, 0xe1}, {&(0x7f0000002240)=""/173, 0xad}, {&(0x7f0000002300)=""/110, 0x6e}, {&(0x7f0000002380)=""/197, 0xc5}, {&(0x7f00000024c0)=""/192, 0xc0}, {&(0x7f0000002580)=""/177, 0xb1}], 0x9, &(0x7f0000002480)=[{&(0x7f0000001100)=""/4101, 0x1005}], 0x1, 0x0) 12:37:44 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) tgkill(r0, 0x0, 0x11) 12:37:44 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) setpriority(0x1, 0x0, 0x8d3) 12:37:44 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 12:37:44 executing program 2: r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001240)=0x0) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r4, 0x12) clone3(&(0x7f0000001140)={0x80000000, &(0x7f0000000000), &(0x7f00000011c0)=0x0, &(0x7f0000000080), {0xb}, &(0x7f00000000c0)=""/4096, 0x1000, &(0x7f00000010c0)=""/41, &(0x7f0000001100)=[r0], 0x1}, 0x58) fork() syz_open_dev$sg(&(0x7f0000001200), 0x0, 0x2181) ptrace(0x4207, r5) 12:37:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) setpriority(0x1, 0x0, 0x8d3) 12:37:59 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce92", 0xb1, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:59 executing program 5: r0 = getpgrp(0x0) gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001180)) getpid() process_vm_writev(r0, &(0x7f0000000080), 0x0, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat2(r1, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x200480, 0x86, 0x4}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001100)={0x0, 0x0}) getpgrp(r4) 12:37:59 executing program 6: r0 = fork() waitid(0x0, r0, 0x0, 0x2, 0x0) 12:37:59 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/26, 0x1a}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) tgkill(r0, 0x0, 0x11) 12:37:59 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 12:37:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce92", 0xb1, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:59 executing program 7: r0 = fork() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:59 executing program 0: r0 = gettid() process_vm_writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f0000000100)=""/132, 0x84}], 0x2, 0x0) setpriority(0x1, 0x0, 0x8d3) 12:37:59 executing program 0: gettid() fork() setpriority(0x1, 0x0, 0x8d3) 12:37:59 executing program 3: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x11) 12:37:59 executing program 1: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 12:37:59 executing program 5: r0 = getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) kcmp(r0, r0, 0x3, 0xffffffffffffffff, r1) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:37:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa", 0xb7, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:37:59 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:37:59 executing program 0: fork() setpriority(0x1, 0x0, 0x8d3) 12:37:59 executing program 3: r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:37:59 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:11 executing program 6: r0 = fork() waitid(0x0, r0, 0x0, 0x2, 0x0) 12:38:11 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:11 executing program 3: r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:38:11 executing program 0: fork() setpriority(0x0, 0x0, 0x8d3) 12:38:11 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/133, 0x85}], 0x1, &(0x7f00000012c0)=[{&(0x7f00000000c0)=""/4110, 0x100e}, {&(0x7f0000001100)=""/232, 0xe8}, {&(0x7f0000000080)=""/49, 0x31}], 0x3, 0x0) 12:38:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa", 0xb7, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:11 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:11 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:11 executing program 3: r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:38:11 executing program 0: fork() setpriority(0x0, 0x0, 0x8d3) 12:38:12 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe(&(0x7f0000001380)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000001300)={0x0, 0xfffffffffffffffc, 0x0, 0x4, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f0000001100)=""/145, 0x91}]}, &(0x7f00000000c0), &(0x7f00000011c0)=""/207, 0x5, 0x20, 0x0, &(0x7f00000012c0)}) 12:38:12 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:12 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:12 executing program 3: getpgrp(0x0) r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:38:12 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:12 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa", 0xb7, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:25 executing program 6: waitid(0x0, 0x0, 0x0, 0x2, 0x0) 12:38:25 executing program 0: fork() setpriority(0x0, 0x0, 0x8d3) 12:38:25 executing program 3: getpgrp(0x0) r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:38:25 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:25 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba10", 0xba, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:25 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 12:38:25 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {0x0}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:25 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) r1 = getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r7, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r6, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) read$rfkill(r2, &(0x7f00000000c0), 0x8) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:38:25 executing program 3: getpgrp(0x0) r0 = getpgrp(0x0) tgkill(0x0, r0, 0x11) 12:38:25 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) 12:38:25 executing program 6: waitid(0x0, 0x0, 0x0, 0x2, 0x0) 12:38:25 executing program 0: fork() setpriority(0x1, 0x0, 0x0) 12:38:25 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) waitid(0x2, 0x0, &(0x7f00000001c0), 0x4, &(0x7f0000000240)) 12:38:25 executing program 3: r0 = getpgrp(0x0) getpgrp(0x0) tgkill(r0, 0x0, 0x11) 12:38:25 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {0x0}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:36 executing program 6: waitid(0x0, 0x0, 0x0, 0x2, 0x0) 12:38:36 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:36 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) capset(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000180)={0x8, 0x6, 0x2, 0x7, 0x6, 0xc15}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) r5 = syz_open_procfs(r1, &(0x7f0000000140)='net/raw6\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) syz_open_dev$sg(&(0x7f00000001c0), 0xffffffffffffffff, 0x202) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) r6 = getpgrp(0x0) process_vm_writev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)=""/60, 0x3c}, {&(0x7f0000000380)=""/201, 0xc9}], 0x2, 0x0) 12:38:36 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {0x0}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:36 executing program 0: fork() setpriority(0x1, 0x0, 0x0) 12:38:36 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba10", 0xba, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:36 executing program 3: r0 = getpgrp(0x0) getpgrp(0x0) tgkill(r0, 0x0, 0x11) 12:38:36 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:36 executing program 5: r0 = getpgrp(0x0) gettid() clone3(&(0x7f0000001540)={0x9800100, &(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)=0x0, {0x3c}, &(0x7f0000001300)=""/228, 0xe4, &(0x7f0000001400)=""/209, &(0x7f0000001500)=[r0, r0, 0x0], 0x3}, 0x58) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001600)='syz0\x00', 0x200002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) clone3(&(0x7f0000001640)={0x40020800, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000001100), {0xb}, &(0x7f0000001140)=""/10, 0xa, &(0x7f0000001180)=""/185, &(0x7f00000015c0)=[0xffffffffffffffff, r0, r1, r0, r0], 0x5, {r2}}, 0x58) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:38:36 executing program 6: fork() waitid(0x0, 0x0, 0x0, 0x2, 0x0) 12:38:36 executing program 5: fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) getpgid(0xffffffffffffffff) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = getpgrp(r0) process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:38:37 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:37 executing program 3: r0 = getpgrp(0x0) getpgrp(0x0) tgkill(r0, 0x0, 0x11) 12:38:37 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r6, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) fcntl$setsig(0xffffffffffffffff, 0xa, 0x3f) 12:38:51 executing program 5: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001100)={{{@in6=@private1, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000040)=0xe8) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:38:51 executing program 6: fork() waitid(0x0, 0x0, 0x0, 0x0, 0x0) 12:38:51 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r7 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r7, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) waitid(0x0, r6, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:51 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) r1 = getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r7, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r6, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) read$rfkill(r2, &(0x7f00000000c0), 0x8) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:38:51 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba10", 0xba, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:51 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:51 executing program 3: r0 = getpgrp(0x0) r1 = getpgrp(0x0) tgkill(r0, r1, 0x0) 12:38:51 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r6, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) unlinkat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x200) 12:38:51 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa", 0xb7, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:51 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x2, r6, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r4, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) waitid(0x0, r5, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:51 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000080)=""/79, &(0x7f0000000100)=0x4f) r2 = getpgrp(0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000001100)=""/197, 0xc5}], 0x2, &(0x7f0000002480)=[{&(0x7f0000001200)=""/4103, 0x1007}], 0x1, 0x0) 12:38:51 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r6, 0xa0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000380)={r5, 0x2, 0xffffffffffffffff, 0x1, 0x80000}) setpriority(0x1, r0, 0x9) 12:38:51 executing program 6: fork() waitid(0x0, 0x0, 0x0, 0x0, 0x0) 12:38:51 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r4, 0x2, r6, 0xa0}) waitid(0x0, r5, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:38:51 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0}) r6 = syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r5, 0x2, r6, 0xa0}) setpriority(0x1, r0, 0x9) 12:38:51 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:38:51 executing program 5: sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x3c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xa91c}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x13}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1e}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x27}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) perf_event_open(&(0x7f0000001100)={0x1, 0x80, 0x5, 0x5, 0x6, 0xfa, 0x0, 0xf6d, 0x875ad5a6570887ae, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xd6e, 0x2, @perf_config_ext={0x4, 0xf5dd}, 0x841, 0x7, 0x2, 0x6, 0x9, 0x8, 0x3ff, 0x0, 0x9, 0x0, 0x9}, r0, 0xb, r1, 0x8) 12:38:51 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba1074", 0xbb, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:38:51 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) waitid(0x0, r4, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:02 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) r1 = getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r7, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r6, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) read$rfkill(r2, &(0x7f00000000c0), 0x8) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:39:02 executing program 6: fork() waitid(0x0, 0x0, 0x0, 0x0, 0x0) 12:39:02 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba1074", 0xbb, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:02 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba10", 0xba, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:02 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) syz_io_uring_setup(0x52ec, &(0x7f0000000440)={0x0, 0xc5c3, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f00000004c0)) setpriority(0x1, r0, 0x9) 12:39:02 executing program 5: r0 = getpgrp(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x56c01, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x80, 0x7f, 0x1, 0x3f, 0xd5, 0x0, 0x7, 0xe00, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc13, 0x1, @perf_config_ext={0x7fff, 0xffff}, 0x40, 0x7fff, 0x40, 0x0, 0x8, 0xfffeffff, 0xa32, 0x0, 0x1000, 0x0, 0x600000}, 0xffffffffffffffff, 0xa, r1, 0x8) process_vm_writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/238}, {&(0x7f0000000100)=""/75}], 0x0, 0x0, 0xfffffffffffffd04, 0x0) tgkill(0x0, r0, 0x26) 12:39:02 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) waitid(0x0, r4, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:02 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:02 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/39, 0x27}, {&(0x7f0000001100)=""/142, 0x8e}, {&(0x7f00000011c0)=""/233, 0xe9}, {&(0x7f00000012c0)=""/77, 0x4d}], 0x4, &(0x7f0000002480), 0x0, 0x0) 12:39:02 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000001b40)=[{{&(0x7f0000001100), 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000001180)=""/223, 0xdf}], 0x2, &(0x7f0000001280)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000001340)=@abs, 0x6e, &(0x7f0000001640)=[{&(0x7f00000013c0)=""/182, 0xb6}, {&(0x7f0000001480)=""/207, 0xcf}, {&(0x7f0000001580)=""/187, 0xbb}], 0x3, &(0x7f0000001680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}}, {{&(0x7f0000001740)=@abs, 0x6e, &(0x7f0000001a80)=[{&(0x7f00000017c0)=""/246, 0xf6}, {&(0x7f00000018c0)=""/138, 0x8a}, {&(0x7f0000001980)=""/11, 0xb}, {&(0x7f00000019c0)=""/164, 0xa4}], 0x4, &(0x7f0000001ac0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}], 0x3, 0x40000000, &(0x7f0000001c40)={r3, r4+60000000}) 12:39:02 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r2, 0x0, 0xfff, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:02 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa", 0xb7, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:02 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)) setpriority(0x1, r0, 0x9) 12:39:12 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) r1 = getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r7, r6, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r3, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r6, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) read$rfkill(r2, &(0x7f00000000c0), 0x8) process_vm_writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:39:12 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/45, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0xfffffffffffffec9}], 0x1, 0x0) 12:39:12 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() pidfd_open(r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:12 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:12 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:12 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = getpid() pidfd_open(r4, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r3, 0x0, 0xfff, 0x0) setpriority(0x1, r0, 0x9) 12:39:12 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba1074", 0xbb, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:12 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:12 executing program 5: sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0x2, &(0x7f0000001180)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x3, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48040) r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:39:12 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:12 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() pidfd_open(r3, 0x0) setpriority(0x1, r0, 0x9) 12:39:12 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:12 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001a00)) r3 = gettid() capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r3, 0xa, r6, 0x12) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r9, r8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000000c0)="baaf87bbe88f209099978c5f8236e222122d5fe6a7e8f7162af46d37552ebc376321992e4d4f93ad33b7afc66ceeea95b176baab", 0x34}, {&(0x7f0000001180)="7fa2264d4e469ad362547f944336c0f6fca26d432d43abb680d04f5e111154934e9e27fec1bdeee3958a950c053afb14e338dab9d5d140b9f5639164e8da389f29f833b565702b29a2bd478e55b71e590b8546954e7215e919fd7794c5e4a4da435748d6c2f7cb16b9a2d52e2d09ea4d040cdbeb9b89d60c5af4c84cfcf93fc0402200a87311ea2877ba1cce4bd2cef4d9efe477c296539ab9f2216987ca534fbfccf6159b6f9c811abd3942110454efa34ca49a22e7e5937322ae54788d4598b841aad18b0acc5f7f", 0xc9}, {&(0x7f0000001280)="cf7c2747289c94", 0x7}, {&(0x7f0000001800)="ef832ee7c539201c00655a17ec4f3d06825e8f7d533cf5a2ec896a7c6179e56117cb1e85b5cca894912fe653594f8c1693ef224110daeafd15b4df325a471acdc595362a2a3892a72284436b889950ca6d6c38ce3515e363d3595b89aa28ab0d2772ff2e0ffaa7a51a52a71f058778e715d27a4bff647e84", 0x78}, {&(0x7f0000001340)="88e1fac2", 0x4}, {&(0x7f0000001380)="b4b11231646a1fb59cc13e266437f9d02cc6b8e53b6d2cbb3153559145120578376a98cc088993a0100f68778f8ac6059ae5f5c679e9152ec8e7ef84ae5d9b18d61f8978a07e30cfbe63879521fec7459b03e50e56065c02803c41c4880f4d49b2a867537a1971c9d77a0f6f440b250936535d52871ae9b213b68091bbdcca6594e958e53b99de374bbdf48ff0a995cb1b62faf5ef237240e57e99bf43ed6e0e10db4f8bab8dc8a9d37acb3012408ea6ef77ad69563f7691bf3daba6d2375c559a1d8bd0f6bb0fa30db8b824c9e1", 0xce}, {&(0x7f0000001880)="e6b2e52022c7b31ddaf8e81b86ad8f7f662d1cbccc5be98350f6e27dd9ca5ed520c73e48f638c8855fcfccf467d1ab84f105ab9aaf4ef5b92bd630405dee19233445556724611b580a056b6a10ee7ac33d2f2743a8beebcd2a9758d03c1ea754c0295490ae91ca9695c657050d442b3d7fafd5824ae757d5cc2268c55295c95c6d9bc7d353a1cd153c87efdc02a9656b335d8ee4d891f370a5797c4cb3cf9980ffc290ee6787da066d02ec24af0b7c33b4d8de37022f7a314ff852e21185dbbabbeeab188811bab7f68747233d572ea8405e77078669b8334f3f243c13935d5eeff270804c01f185247ce2cccf7110ba1b2ca2eededc0dca", 0xf8}], 0x7, 0x0, 0x0, 0x44080}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)="3f26fb9d54f4da863dd61dadde2fbfd73b5504f8d50837e7e0421397abf3fbe1a059c81203bc542506eb87d6945c656775d6b365aaf91a1780fefe9f594bc6da29d4145ff3a3a504411fb1b7a4b80a8db7273034b62643434fbd3ccc82bf4273310ddc93352fdf6e88cc4a1e6190007d6bf57714ed17f7d401c89ecb25f69bd82ed36a0e36b09f97", 0x88}, {&(0x7f00000016c0)="245b4c1e033840a1c5e09db864bae11520d201218821ca092a36ef9de43c0dd3a223bfa955c665e4c9dc4395a5e8e48bed70d2d9261f1bdfae5ce28757f4ec95cbf0a9b0632d281472f0fe06f225434d6cd8fc89a8a587e1a35536d77d2748d691092ecae95d040581fc2476a7f5c912c71e4321564597df7341255fa2be076890c86218c98cc808f55f6faba93beee84e12494e7474fd932b5c0d010714a7fbf9d2181fb712f3ae5a5815c1cd5d718453df1ef00678843f2af535c020b265f4c51942", 0xc3}], 0x2, &(0x7f0000001a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x24000000}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000021c0)="34544609557885841eaf95db231f98816197faa9363075f5d9852218547c36cc8ee05a50e4b3f6298aa777705c1788caffc310803c7fa0bc3ce9c06d5aeb8bc30f2bc0fdb40a11f7607d9ceb9efa8ca729433bd59543b3f4e4840270bff4b7a082102376b47403919075bcef99a21cb84dbf15c5c43f497e303f85a5d3cd4e5c27abfcb8386cf552ff4ca0c278b22590a615a046c9fb0843bf1800b639696f96009837ab7f8eb66483a6f2ff7f0000f3ad90d21e13a500b951dda928946867d269a7f1f176982fec1a52f8c1a80a68636476563b9fe393d216d5c98d6e720df1b16de7be67b45cc2bcf206f4586a87", 0xef}], 0x1, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r8, 0xee00}}}], 0x20, 0x40000}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002080)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000001c80)="6b52f9863784c6499070cef168f296d2c5cacaa1de6d3c86209f5a0258783853e6618e9bf297ec79dfd39c4f8684d89e", 0x30}, {&(0x7f0000001cc0)="36ec93384dfd5af08bc4d3ead316a7afec592945d30713a2f9d78ce2ffcced0bbd741f2ffc40877b1cbb369fbb81cd14305c771624477f663fc17a1a204887ca1f71e2788f2dddc56c", 0x49}, {&(0x7f0000001d40)="aba9647e3934fa79a55b908cf1b193faf8d60f", 0x13}, {&(0x7f0000001d80)="db31003706b8561a40c7886438999f2163b3dc1b7e127eabacb262fbc717a362e6430c02dcbfcabef293258f4136b3ee0466998f312051c18a94aefe868acba6086de7db09420f8a9d4ead0fb1b894219562d5941d1d71ccf1f38034d791c1b01bb9c9acbe7c77dd39146428ca97f336b5bd3dfd7e1e5e1aa9f6966b97efc7d31835d86bee", 0x85}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f0000001e40)="1f291ccdf03e21fc98df485551809e79339dc84ab034f79ffdcf77d78d572c0e619b3f2699f7cc2502b80af848bbecd3e945b6fe7d2636d282e0b9a208e3c8f566c806db7cdc48080c8177b9b0fb1a77edb62105aa2ee12b243d9d7cfe7918e6b8ea014928f1795ef4845b325caf110879506dd092a5e6b3d9a21ad36214af0637ad6ac511644e221ce67b9d7ce4a0ebe231bf9aa4b26f60c65d48ab7630dd85a081b985dc44c3e5df4c1bbb0958acdf01c9d4", 0xb3}, {&(0x7f0000001f00)="cc205e67350f7bdee382e6dd59e9b9fe8ce56d603d", 0x15}, {&(0x7f0000001f40)="bbec9f6c72a0d55958e17f87e544fee9421abf58eebe9852bf8e5d8ea7de4639be8c270689df99425b9484c11c853e1b91e90f598e8d6414c56721900ad135931fc007017f1ae5d9ac852c80cb459bf06d34ae58283807cf810ddbe677cae43c3c64843f2cd072356bf9e9f0b06d51efa10cbf6c04e085c50cb5e6a5705864f2b358ea8746abdc4d8f8a36777ecf6fc28721a3dc585c67795775cbe7d7926fcf96f469c04fef31bf1f2bad24de60372340bdde8ea7bd45c9b69dd98c437cdcf9d3a6e2a5c6037e891e423656bb715dd1", 0xd0}, {&(0x7f0000002040)}], 0xa, 0x0, 0x0, 0x4000010}}, {{&(0x7f0000002140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780), 0x0, 0x0, 0x0, 0xc4}}], 0x5, 0x0) 12:39:12 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:12 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:13 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 1923.844430] cgroup: fork rejected by pids controller in /syz6 12:39:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r5, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) read$rfkill(r1, &(0x7f00000000c0), 0x8) 12:39:24 executing program 5: r0 = getpgrp(0xffffffffffffffff) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000040)={&(0x7f0000001100)=""/211, 0xd3}) 12:39:24 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {0x0}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:24 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:24 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}]) r3 = syz_open_dev$vcsn(&(0x7f0000001180), 0x3, 0x200) recvmmsg$unix(r3, &(0x7f0000002080)=[{{&(0x7f00000011c0), 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)=""/212, 0xd4}], 0x1, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001680), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/244, 0xf4}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/233, 0xe9}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/164, 0xa4}, {&(0x7f0000001e00)=""/22, 0x16}, {&(0x7f0000001e40)=""/59, 0x3b}], 0x8, &(0x7f0000001f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002040)=[{&(0x7f00000054c0)=""/4096, 0x1000}], 0x1}}], 0x5, 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r4 = getpid() tgkill(r4, r0, 0x2d) 12:39:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:24 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getpid() setpriority(0x1, r0, 0x9) 12:39:24 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x8, 0xb0, 0x9}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:24 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) process_vm_writev(0x0, &(0x7f0000000040)=[{&(0x7f0000001100)=""/106, 0x6a}], 0x1, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/5, 0x5}, {&(0x7f0000001180)=""/215, 0xd7}, {&(0x7f0000001280)=""/13, 0xd}, {&(0x7f00000012c0)=""/156, 0x9c}], 0x4, 0x0) 12:39:24 executing program 3: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001a00)) r3 = gettid() capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r3, 0xa, r6, 0x12) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r9, r8, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004840)=[{{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001500)=[{&(0x7f00000000c0)="baaf87bbe88f209099978c5f8236e222122d5fe6a7e8f7162af46d37552ebc376321992e4d4f93ad33b7afc66ceeea95b176baab", 0x34}, {&(0x7f0000001180)="7fa2264d4e469ad362547f944336c0f6fca26d432d43abb680d04f5e111154934e9e27fec1bdeee3958a950c053afb14e338dab9d5d140b9f5639164e8da389f29f833b565702b29a2bd478e55b71e590b8546954e7215e919fd7794c5e4a4da435748d6c2f7cb16b9a2d52e2d09ea4d040cdbeb9b89d60c5af4c84cfcf93fc0402200a87311ea2877ba1cce4bd2cef4d9efe477c296539ab9f2216987ca534fbfccf6159b6f9c811abd3942110454efa34ca49a22e7e5937322ae54788d4598b841aad18b0acc5f7f", 0xc9}, {&(0x7f0000001280)="cf7c2747289c94", 0x7}, {&(0x7f0000001800)="ef832ee7c539201c00655a17ec4f3d06825e8f7d533cf5a2ec896a7c6179e56117cb1e85b5cca894912fe653594f8c1693ef224110daeafd15b4df325a471acdc595362a2a3892a72284436b889950ca6d6c38ce3515e363d3595b89aa28ab0d2772ff2e0ffaa7a51a52a71f058778e715d27a4bff647e84", 0x78}, {&(0x7f0000001340)="88e1fac2", 0x4}, {&(0x7f0000001380)="b4b11231646a1fb59cc13e266437f9d02cc6b8e53b6d2cbb3153559145120578376a98cc088993a0100f68778f8ac6059ae5f5c679e9152ec8e7ef84ae5d9b18d61f8978a07e30cfbe63879521fec7459b03e50e56065c02803c41c4880f4d49b2a867537a1971c9d77a0f6f440b250936535d52871ae9b213b68091bbdcca6594e958e53b99de374bbdf48ff0a995cb1b62faf5ef237240e57e99bf43ed6e0e10db4f8bab8dc8a9d37acb3012408ea6ef77ad69563f7691bf3daba6d2375c559a1d8bd0f6bb0fa30db8b824c9e1", 0xce}, {&(0x7f0000001880)="e6b2e52022c7b31ddaf8e81b86ad8f7f662d1cbccc5be98350f6e27dd9ca5ed520c73e48f638c8855fcfccf467d1ab84f105ab9aaf4ef5b92bd630405dee19233445556724611b580a056b6a10ee7ac33d2f2743a8beebcd2a9758d03c1ea754c0295490ae91ca9695c657050d442b3d7fafd5824ae757d5cc2268c55295c95c6d9bc7d353a1cd153c87efdc02a9656b335d8ee4d891f370a5797c4cb3cf9980ffc290ee6787da066d02ec24af0b7c33b4d8de37022f7a314ff852e21185dbbabbeeab188811bab7f68747233d572ea8405e77078669b8334f3f243c13935d5eeff270804c01f185247ce2cccf7110ba1b2ca2eededc0dca", 0xf8}], 0x7, 0x0, 0x0, 0x44080}}, {{&(0x7f0000001580)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000001600)="3f26fb9d54f4da863dd61dadde2fbfd73b5504f8d50837e7e0421397abf3fbe1a059c81203bc542506eb87d6945c656775d6b365aaf91a1780fefe9f594bc6da29d4145ff3a3a504411fb1b7a4b80a8db7273034b62643434fbd3ccc82bf4273310ddc93352fdf6e88cc4a1e6190007d6bf57714ed17f7d401c89ecb25f69bd82ed36a0e36b09f97", 0x88}, {&(0x7f00000016c0)="245b4c1e033840a1c5e09db864bae11520d201218821ca092a36ef9de43c0dd3a223bfa955c665e4c9dc4395a5e8e48bed70d2d9261f1bdfae5ce28757f4ec95cbf0a9b0632d281472f0fe06f225434d6cd8fc89a8a587e1a35536d77d2748d691092ecae95d040581fc2476a7f5c912c71e4321564597df7341255fa2be076890c86218c98cc808f55f6faba93beee84e12494e7474fd932b5c0d010714a7fbf9d2181fb712f3ae5a5815c1cd5d718453df1ef00678843f2af535c020b265f4c51942", 0xc3}], 0x2, &(0x7f0000001a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0xb8, 0x24000000}}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000021c0)="34544609557885841eaf95db231f98816197faa9363075f5d9852218547c36cc8ee05a50e4b3f6298aa777705c1788caffc310803c7fa0bc3ce9c06d5aeb8bc30f2bc0fdb40a11f7607d9ceb9efa8ca729433bd59543b3f4e4840270bff4b7a082102376b47403919075bcef99a21cb84dbf15c5c43f497e303f85a5d3cd4e5c27abfcb8386cf552ff4ca0c278b22590a615a046c9fb0843bf1800b639696f96009837ab7f8eb66483a6f2ff7f0000f3ad90d21e13a500b951dda928946867d269a7f1f176982fec1a52f8c1a80a68636476563b9fe393d216d5c98d6e720df1b16de7be67b45cc2bcf206f4586a87", 0xef}], 0x1, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, r8, 0xee00}}}], 0x20, 0x40000}}, {{&(0x7f0000001c00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002080)=[{&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000001c80)="6b52f9863784c6499070cef168f296d2c5cacaa1de6d3c86209f5a0258783853e6618e9bf297ec79dfd39c4f8684d89e", 0x30}, {&(0x7f0000001cc0)="36ec93384dfd5af08bc4d3ead316a7afec592945d30713a2f9d78ce2ffcced0bbd741f2ffc40877b1cbb369fbb81cd14305c771624477f663fc17a1a204887ca1f71e2788f2dddc56c", 0x49}, {&(0x7f0000001d40)="aba9647e3934fa79a55b908cf1b193faf8d60f", 0x13}, {&(0x7f0000001d80)="db31003706b8561a40c7886438999f2163b3dc1b7e127eabacb262fbc717a362e6430c02dcbfcabef293258f4136b3ee0466998f312051c18a94aefe868acba6086de7db09420f8a9d4ead0fb1b894219562d5941d1d71ccf1f38034d791c1b01bb9c9acbe7c77dd39146428ca97f336b5bd3dfd7e1e5e1aa9f6966b97efc7d31835d86bee", 0x85}, {&(0x7f00000034c0)="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", 0x1000}, {&(0x7f0000001e40)="1f291ccdf03e21fc98df485551809e79339dc84ab034f79ffdcf77d78d572c0e619b3f2699f7cc2502b80af848bbecd3e945b6fe7d2636d282e0b9a208e3c8f566c806db7cdc48080c8177b9b0fb1a77edb62105aa2ee12b243d9d7cfe7918e6b8ea014928f1795ef4845b325caf110879506dd092a5e6b3d9a21ad36214af0637ad6ac511644e221ce67b9d7ce4a0ebe231bf9aa4b26f60c65d48ab7630dd85a081b985dc44c3e5df4c1bbb0958acdf01c9d4", 0xb3}, {&(0x7f0000001f00)="cc205e67350f7bdee382e6dd59e9b9fe8ce56d603d", 0x15}, {&(0x7f0000001f40)="bbec9f6c72a0d55958e17f87e544fee9421abf58eebe9852bf8e5d8ea7de4639be8c270689df99425b9484c11c853e1b91e90f598e8d6414c56721900ad135931fc007017f1ae5d9ac852c80cb459bf06d34ae58283807cf810ddbe677cae43c3c64843f2cd072356bf9e9f0b06d51efa10cbf6c04e085c50cb5e6a5705864f2b358ea8746abdc4d8f8a36777ecf6fc28721a3dc585c67795775cbe7d7926fcf96f469c04fef31bf1f2bad24de60372340bdde8ea7bd45c9b69dd98c437cdcf9d3a6e2a5c6037e891e423656bb715dd1", 0xd0}, {&(0x7f0000002040)}], 0xa, 0x0, 0x0, 0x4000010}}, {{&(0x7f0000002140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004780), 0x0, 0x0, 0x0, 0xc4}}], 0x5, 0x0) 12:39:24 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:24 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, r0, 0x9) 12:39:25 executing program 5: r0 = getpgrp(0x0) clone3(&(0x7f0000002200)={0x50a00080, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000001100), {0x2}, &(0x7f0000001140)=""/4096, 0x1000, &(0x7f0000002140)=""/82, &(0x7f00000021c0)=[r0, 0x0, r0, r0], 0x4}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000002280)='blkio.bfq.io_merged\x00', 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f00000024c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x1, 0x1f, 0x5, 0x5, 0x3, 0x3e, 0x1f4e, 0x1ca, 0x40, 0x45, 0x5, 0x6a34, 0x38, 0x2, 0x6, 0x4, 0x6}, [{0x4, 0xffffffff, 0x0, 0x101, 0x40, 0x4, 0x7, 0x6}, {0x6, 0x58bd, 0x1f, 0x20, 0x3ff, 0x8, 0x7, 0x9}], "0471f437dfa587479ba6c34d1012c5d07fa000979e062a6a0ab17006fa2dcb0d76c7d45eaa32f30454477ec31769187a2535106e38743ae2f28bbadebb9a4800948c7bd7abe1d5d7c602bed5d4492773322ad0f025ecf5a776b9145945ed5daa7f8b1a9903a2d6cda586e5e42cb6a526575d927faab706960bd78f51be6939b64589b51d53a59a352469ed5792ac02d414ab08cb5d1a9e71e70da35b05e3e85edafc02999fd6bfe2d63e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x85a) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:39:25 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:25 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) setpriority(0x1, r0, 0x9) 12:39:25 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, r0, 0x9) 12:39:38 executing program 5: r0 = getpgrp(0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) getpgrp(r1) 12:39:38 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:38 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) mount$9p_unix(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001180), 0x40020, &(0x7f00000011c0)=ANY=[@ANYBLOB="747200040000756e69782c6163636573733d636c69656e742c7569643d", @ANYRESDEC=r5, @ANYBLOB="2cf063723d30303030303030303030303030303030303032392c7365636c6162656c2c950722b3388b855e3d3970002c00"]) 12:39:38 executing program 6: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}]) r3 = syz_open_dev$vcsn(&(0x7f0000001180), 0x3, 0x200) recvmmsg$unix(r3, &(0x7f0000002080)=[{{&(0x7f00000011c0), 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)=""/212, 0xd4}], 0x1, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001680), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/244, 0xf4}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/233, 0xe9}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/164, 0xa4}, {&(0x7f0000001e00)=""/22, 0x16}, {&(0x7f0000001e40)=""/59, 0x3b}], 0x8, &(0x7f0000001f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002040)=[{&(0x7f00000054c0)=""/4096, 0x1000}], 0x1}}], 0x5, 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r4 = getpid() tgkill(r4, r0, 0x2d) 12:39:38 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x8, 0xb0, 0x9}) setpriority(0x1, r0, 0x9) 12:39:38 executing program 3: r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000001a80)=[&(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0}]) r3 = syz_open_dev$vcsn(&(0x7f0000001180), 0x3, 0x200) recvmmsg$unix(r3, &(0x7f0000002080)=[{{&(0x7f00000011c0), 0x6e, &(0x7f0000001340)=[{&(0x7f0000001240)=""/212, 0xd4}], 0x1, &(0x7f0000001380)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}, {{&(0x7f00000014c0), 0x6e, &(0x7f0000001640)=[{&(0x7f0000001540)=""/9, 0x9}, {&(0x7f0000001580)=""/154, 0x9a}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001680), 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001700)=""/244, 0xf4}, {&(0x7f0000001800)=""/181, 0xb5}, {&(0x7f00000018c0)=""/233, 0xe9}], 0x3, &(0x7f0000001a00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000001ac0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/185, 0xb9}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001c40)=""/215, 0xd7}, {&(0x7f0000001d40)=""/164, 0xa4}, {&(0x7f0000001e00)=""/22, 0x16}, {&(0x7f0000001e40)=""/59, 0x3b}], 0x8, &(0x7f0000001f00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000001fc0), 0x6e, &(0x7f0000002040)=[{&(0x7f00000054c0)=""/4096, 0x1000}], 0x1}}], 0x5, 0x1, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) r4 = getpid() tgkill(r4, r0, 0x2d) 12:39:38 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:38 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:38 executing program 5: r0 = getpgrp(0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) pidfd_open(r1, 0x0) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000002480)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) 12:39:38 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:38 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001640)={&(0x7f00000019c0)=ANY=[@ANYBLOB="b8020000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="9c01028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000600000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004007f0000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ca00000008000100", @ANYRES32=0x0, @ANYBLOB="7800028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="78000280380001002400015f70656572735f696e74657276616c000000f0ffffff00000000050003000300000008000400010000003c000100240001006d6f6465000000000000000000000000000000108e8676d0199afc000000000005d7cbea661316a0fdebc124b210e865000300050000000b00040072616e646f6d000000000000000000"], 0x2b8}, 0x1, 0x0, 0x0, 0x50}, 0x48000) 12:39:38 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:38 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, r0, 0x9) 12:39:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:38 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:49 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000001380)={'syztnl2\x00', &(0x7f0000001280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x7fffffff, 0x2a, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x7, 0x9, 0x9}}) 12:39:49 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:49 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:49 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) setpriority(0x1, r0, 0x9) 12:39:49 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:49 executing program 5: r0 = getpgrp(0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) r5 = gettid() capset(&(0x7f0000000080)={0x20071026, r5}, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001180)=@kern={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001300)=[{&(0x7f00000011c0)={0x120, 0x14, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x30, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x22}}, @generic="2e20d7bc0bf1562148e29cb821ae32242b1a2a97711c4f7a474331bd4e9a386796649759695dfe50e8cd95df28b948b146acff6a9d415cc91afd3dcbf93d3cab9f16beaef915299104951501223ca2bb0998422671c434eb1de11dffe1709722a465e841de7ed459b28930d9a2fbdbe0e90e7c7bd4f7c16a39e8df97b00ea6e6b198a7dcfe259530ab0a44a7075c738d29090da1e4bbeb57c9dcb0730f66ac9c8e85572d3a6bdb468dfccf43f4e15a7d361e98530d53507f538e1355cbc524814652622df897332541aa12aebc633bf8d655dc1a8824d7af0ad97b42d0e1a4776cb9acb356751012c52896f1c6bf1aecb7f8ba6a4fb015f9", @typed={0x8, 0x25, 0x0, 0x0, @u32=0x5}]}, 0x120}], 0x1, 0x0, 0x0, 0x8000}, 0x40004) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r7 = dup2(r6, 0xffffffffffffffff) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r5, 0xa, r7, 0x12) rt_tgsigqueueinfo(r1, r5, 0x35, &(0x7f0000001100)={0x3c, 0x80000000, 0x1}) process_vm_writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/39, 0x27}], 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) [ 1960.685371] Invalid option length (1047482) for dns_resolver key 12:39:49 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) 12:39:49 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:49 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:39:50 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) setpriority(0x1, r0, 0x9) 12:39:50 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:50 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:39:50 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) 12:39:50 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:39:50 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {0x0}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:01 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0}) setpriority(0x1, r0, 0x9) 12:40:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:01 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) 12:40:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) setsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000001340)=0x22, 0x4) 12:40:01 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {0x0}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:01 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 1972.206275] Invalid option length (1047482) for dns_resolver key [ 1972.239408] Invalid option length (1047482) for dns_resolver key 12:40:01 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:01 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:40:01 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {0x0}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 1972.318090] Invalid option length (1047482) for dns_resolver key 12:40:01 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) gettid() r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000001300)={{0x1, 0x1, 0x18, r2, {0x80}}, './file0\x00'}) 12:40:01 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 1972.492651] Invalid option length (1047482) for dns_resolver key 12:40:01 executing program 6: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:01 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 1972.569192] Invalid option length (1047482) for dns_resolver key [ 1972.595033] Invalid option length (1047482) for dns_resolver key 12:40:11 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:11 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:11 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:40:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r5, r4, 0x0) 12:40:11 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:11 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000640)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) waitid(0x2, r1, 0x0, 0x40000000, 0x0) [ 1982.375492] Invalid option length (1047482) for dns_resolver key 12:40:11 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 1982.449896] Invalid option length (1047482) for dns_resolver key 12:40:11 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:11 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 12:40:11 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:11 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:40:11 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 1982.667758] Invalid option length (1047482) for dns_resolver key [ 1982.731498] Invalid option length (1047482) for dns_resolver key 12:40:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:24 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 12:40:24 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$cgroup_pid(r8, &(0x7f0000000100)=r5, 0x12) timer_create(0x7, &(0x7f0000000140)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000180)) process_vm_writev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) 12:40:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x9) 12:40:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x0, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:24 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x3, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:24 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:24 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000640)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) waitid(0x2, r1, 0x0, 0x40000000, 0x0) 12:40:24 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) [ 1995.743031] Invalid option length (1047482) for dns_resolver key [ 1995.753152] Invalid option length (1047482) for dns_resolver key 12:40:24 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x9) 12:40:24 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$cgroup_pid(r8, &(0x7f0000000100)=r5, 0x12) timer_create(0x7, &(0x7f0000000140)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000180)) process_vm_writev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) [ 1995.809342] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 1995.809342] program syz-executor.6 not setting count and/or reply_len properly 12:40:25 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) socket$nl_xfrm(0x10, 0x3, 0x6) 12:40:25 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:25 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) setpriority(0x1, 0x0, 0x9) 12:40:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setpriority(0x1, 0x0, 0x9) 12:40:44 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:44 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$cgroup_pid(r8, &(0x7f0000000100)=r5, 0x12) timer_create(0x7, &(0x7f0000000140)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000180)) process_vm_writev(r5, &(0x7f0000000500)=[{&(0x7f0000000000)=""/242, 0xf2}], 0x1, &(0x7f0000000640)=[{&(0x7f0000000580)=""/25, 0x19}, {&(0x7f00000005c0)=""/116, 0x74}], 0x2, 0x0) 12:40:44 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 12:40:44 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x0, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:44 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000640)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) waitid(0x2, r1, 0x0, 0x40000000, 0x0) 12:40:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) gettid() r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 2015.616313] Invalid option length (1047482) for dns_resolver key 12:40:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:44 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setpriority(0x1, 0x0, 0x9) 12:40:44 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) waitid(0x0, r0, 0x0, 0x2, 0x0) 12:40:44 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040), 0x0) gettid() syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 12:40:44 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$cgroup_pid(r8, &(0x7f0000000100)=r5, 0x12) timer_create(0x7, &(0x7f0000000140)={0x0, 0x11, 0x0, @tid=r5}, &(0x7f0000000180)) [ 2015.694964] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2015.694964] program syz-executor.6 not setting count and/or reply_len properly 12:40:44 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040), 0x0) gettid() 12:40:45 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) waitid(0x0, r0, 0x0, 0x2, 0x0) 12:40:45 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2015.834564] audit: type=1326 audit(1756816845.031:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18516 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd003ed1b19 code=0x0 12:40:45 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) write$cgroup_pid(r8, &(0x7f0000000100)=r5, 0x12) 12:40:45 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000640)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)) 12:40:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setpriority(0x1, 0x0, 0x9) 12:40:45 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x0, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) pipe2(&(0x7f0000000040), 0x0) [ 2015.972956] Invalid option length (1047482) for dns_resolver key 12:40:45 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r7, &(0x7f0000000100)=r5, 0x12) 12:40:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) setpriority(0x1, 0x0, 0x9) 12:40:45 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) waitid(0x0, r0, 0x0, 0x2, 0x0) 12:40:45 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) getpgrp(0x0) [ 2016.029041] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2016.029041] program syz-executor.6 not setting count and/or reply_len properly 12:40:45 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) ioctl$SCSI_IOCTL_GET_IDLUN(r7, 0x5382, &(0x7f0000000640)) 12:40:45 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) setpriority(0x1, 0x0, 0x9) [ 2016.213639] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2016.213639] program syz-executor.6 not setting count and/or reply_len properly 12:40:55 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r0, 0x0, 0xa) 12:40:55 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:40:55 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) 12:40:55 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) 12:40:55 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:40:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0x0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:40:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) setpriority(0x1, 0x0, 0x9) 12:40:55 executing program 6: r0 = clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r5, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r8], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r5, 0x12) [ 2026.792907] audit: type=1326 audit(1756816855.992:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18796 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd003ed1b19 code=0x0 [ 2026.818293] Invalid option length (1047482) for dns_resolver key 12:40:56 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:40:56 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) [ 2026.970597] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2026.970597] program syz-executor.6 not setting count and/or reply_len properly 12:41:09 executing program 0: read(0xffffffffffffffff, 0x0, 0xa) 12:41:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:41:09 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:41:09 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:41:09 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), 0x4) openat2(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={0x10002, 0x8, 0x8}, 0x18) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r5, 0x12) 12:41:09 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0x0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:09 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) waitid(0x0, 0x0, &(0x7f0000000500), 0x20000000, &(0x7f0000000100)) 12:41:09 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) [ 2040.763289] audit: type=1326 audit(1756816869.963:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19027 comm="syz-executor.2" exe="/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd003ed1b19 code=0x0 [ 2040.793862] Invalid option length (1047482) for dns_resolver key 12:41:10 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000280), 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r7, &(0x7f0000000100)=r5, 0x12) 12:41:10 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) [ 2040.876460] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2040.876460] program syz-executor.6 not setting count and/or reply_len properly 12:41:10 executing program 0: read(0xffffffffffffffff, 0x0, 0xa) 12:41:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:41:10 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) 12:41:10 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) syz_open_dev$vcsa(&(0x7f0000000240), 0xfff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r6, &(0x7f0000000100)=r5, 0x12) 12:41:10 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) write$binfmt_aout(r4, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r0, @ANYRES16=r7], 0x120) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:41:10 executing program 0: read(0xffffffffffffffff, 0x0, 0xa) 12:41:10 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x1, 0x0, 0x9) 12:41:10 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2041.314512] sg_write: data in/out 875837202/246 bytes for SCSI command 0x0-- guessing data in; [ 2041.314512] program syz-executor.6 not setting count and/or reply_len properly 12:41:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) 12:41:22 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:41:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0x0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:22 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 12:41:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) setpriority(0x1, 0x0, 0x9) [ 2052.986980] Invalid option length (1047482) for dns_resolver key 12:41:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0xa) 12:41:22 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r6, &(0x7f0000000100)=r5, 0x12) 12:41:22 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x100080, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [{@euid_gt={'euid>', 0xee00}}, {@obj_role={'obj_role', 0x3d, '\xfbL\xc5\xc1O\xa9\x16\x88X{\xf4\x8f\xc0\x9b>\xfd\xff\xd2B\xd4\xfcI\xcb&\xac(\x01KU\xefX'}}, {@obj_type={'obj_type', 0x3d, '\xe1\xec6\xfa\xa55j\xed\x18s\x90\x1f\xc1Q\x1f\xfaO\xb7\x84\xc5\x8c\xb8\xea\xe4\xdc\xb7{\x9a~{\xda\x89\x82\xb2C\x06~0\x7f\xc9\x8daNw_\xddh`\v\x18t\x88\xe6}\x8b\xaay\xb7.\bPJuVT.\x1by26\x8fh\xaauyb\x92\xech\x90\x8a\xf7\xb8\xe32\x8e\bG)\x99H\xdd\x95\xca\x93Vl\x84\xf3\x92\x85t\xf6\x0fq\"Y_f\xc6\xdb\x81\xfbm\xb98\x1e\n\x9c\x93C\xba\xf5\xa9'}}]}}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0xa) [ 2053.058928] audit: type=1326 audit(1756816882.254:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19378 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff4616b19 code=0x0 12:41:22 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:22 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, 0x0, 0xa) 12:41:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) 12:41:22 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:22 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r6, &(0x7f0000000100)=r5, 0x12) 12:41:22 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0xa) 12:41:22 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:41:22 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0x0, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:22 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) waitid(0x0, 0x0, 0x0, 0x0, 0x0) 12:41:22 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:22 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) kcmp(0x0, r0, 0x5, 0xffffffffffffffff, r4) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r5, &(0x7f0000000100), 0x12) [ 2053.440148] Invalid option length (1047482) for dns_resolver key 12:41:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) setpriority(0x1, 0x0, 0x9) 12:41:33 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0x0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:33 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x1}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 12:41:33 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:41:33 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:33 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0xa) 12:41:33 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) pipe2(&(0x7f0000000040), 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:33 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0x0, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2064.778402] Invalid option length (1047482) for dns_resolver key [ 2064.781117] audit: type=1326 audit(1756816893.976:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19828 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff4616b19 code=0x0 12:41:34 executing program 0: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0xa) [ 2064.834737] Invalid option length (1047482) for dns_resolver key 12:41:34 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:34 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 12:41:34 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0x0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:34 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0x0, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2064.999987] Invalid option length (703) for dns_resolver key 12:41:34 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r4, &(0x7f0000000100), 0x12) [ 2065.053017] Invalid option length (1047482) for dns_resolver key 12:41:34 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_IO(r5, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffe, 0x1c, 0xff, @buffer={0x0, 0xe9, &(0x7f0000000340)=""/233}, &(0x7f0000000440)="7d98b3d6fc67cac16e2c8bd20526e35b261977e55c9d43ae7c9a5597", &(0x7f0000000480)=""/245, 0x51be86b0, 0x10012, 0x3, &(0x7f0000000580)}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:34 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r4, &(0x7f0000000100), 0x12) 12:41:46 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x0, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:46 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0x0, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:41:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) setpriority(0x1, 0x0, 0x9) 12:41:46 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {0x0}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:41:46 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:46 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r3, &(0x7f0000000100), 0x12) 12:41:46 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:46 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0x0, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2077.538817] Invalid option length (1047482) for dns_resolver key [ 2077.545448] Invalid option length (703) for dns_resolver key [ 2077.575312] audit: type=1326 audit(1756816906.772:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20181 comm="syz-executor.1" exe="/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efff4616b19 code=0x0 [ 2077.595906] Invalid option length (1047482) for dns_resolver key 12:41:46 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:41:46 executing program 3: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:46 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:41:46 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:46 executing program 3: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:41:47 executing program 0: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:41:47 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:41:47 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {0x0}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x0, 0x0, 0x9) 12:42:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x0, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:01 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {0x0}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:01 executing program 3: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:01 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040), 0x0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:42:01 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 12:42:01 executing program 2: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:42:01 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:42:01 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2092.077747] Invalid option length (1047482) for dns_resolver key 12:42:01 executing program 3: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2092.180580] Invalid option length (1047482) for dns_resolver key 12:42:12 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setpriority(0x0, 0x0, 0x0) 12:42:12 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:12 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:42:12 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 12:42:12 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:12 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:42:12 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:12 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x0, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:12 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000100), 0x12) 12:42:12 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) [ 2103.622610] Invalid option length (1047482) for dns_resolver key [ 2103.642648] Invalid option length (1047482) for dns_resolver key 12:42:26 executing program 3: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:26 executing program 1: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001400)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) capset(&(0x7f0000001380)={0x20080522, r0}, &(0x7f00000013c0)={0x8, 0x7ff, 0x876c, 0x7, 0x9, 0x4}) r5 = getpid() capset(&(0x7f0000001440)={0x99c01a1, r5}, &(0x7f0000001480)={0x8000, 0x4, 0x77, 0x498, 0x400, 0xff}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0xb, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x2003}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x0, 0x2, 0x0, 0x2}, r0, 0x1, 0xffffffffffffffff, 0x12) clone3(&(0x7f0000001300)={0x20000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0xf}, &(0x7f0000000300)=""/4096, 0x1000, &(0x7f00000001c0)=""/170, &(0x7f0000000280)=[r0, r0, r0, r0, r0], 0x5, {r3}}, 0x58) rt_sigqueueinfo(r5, 0x16, &(0x7f00000014c0)={0x26, 0x6, 0x32}) process_vm_writev(r6, 0x0, 0x3a, 0x0, 0xffffffffffffffec, 0x2) 12:42:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x0, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:26 executing program 2: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:26 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) 12:42:26 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:26 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:42:26 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r2, &(0x7f0000000100), 0x12) [ 2116.890812] Invalid option length (1047482) for dns_resolver key 12:42:26 executing program 5: gettid() r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) [ 2116.961206] Invalid option length (1047482) for dns_resolver key 12:42:26 executing program 3: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:26 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:42:26 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) 12:42:26 executing program 3: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:26 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:42:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x0, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:26 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x0, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2117.296359] Invalid option length (1047482) for dns_resolver key [ 2117.349466] Invalid option length (1047482) for dns_resolver key 12:42:38 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:42:38 executing program 3: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:38 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:42:38 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) 12:42:38 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:38 executing program 1: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x0, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:38 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x0, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2129.035233] Invalid option length (1047482) for dns_resolver key 12:42:38 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) [ 2129.111649] Invalid option length (1047482) for dns_resolver key [ 2129.122158] Invalid option length (1047482) for dns_resolver key 12:42:38 executing program 3: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:38 executing program 5: r0 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:42:38 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000001140)='./file0\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:38 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:42:38 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) dup2(0xffffffffffffffff, r3) 12:42:38 executing program 3: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r1, &(0x7f0000000100), 0x12) 12:42:38 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {0x0}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2129.536252] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2129.536252] program syz-executor.2 not setting count and/or reply_len properly 12:42:38 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:38 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 12:42:38 executing program 1: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:38 executing program 2: uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x0, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:38 executing program 3: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2129.842018] Invalid option length (1047482) for dns_resolver key [ 2129.856922] Invalid option length (1047482) for dns_resolver key [ 2129.898445] Invalid option length (1047482) for dns_resolver key 12:42:49 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x0, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:49 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:42:49 executing program 3: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:49 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:42:49 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:42:49 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 12:42:49 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {0x0}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:42:49 executing program 2: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)) dup2(0xffffffffffffffff, r3) [ 2140.611828] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2140.611828] program syz-executor.2 not setting count and/or reply_len properly 12:42:49 executing program 3: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2140.639662] Invalid option length (1047482) for dns_resolver key 12:42:49 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2140.935870] cgroup: fork rejected by pids controller in /syz2 12:43:01 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:01 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x0, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:01 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 12:43:01 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {0x0}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:01 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:01 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:01 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2152.863438] Invalid option length (1047482) for dns_resolver key 12:43:02 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) 12:43:02 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:02 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:02 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) 12:43:02 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:02 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:02 executing program 0: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:02 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:02 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2153.393911] Invalid option length (1047482) for dns_resolver key 12:43:15 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:15 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) 12:43:15 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:15 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:15 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:43:15 executing program 0: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:15 executing program 2: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x5, {0x5, 0x24, "2d5786"}}, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x44, &(0x7f0000000140)={0x20, 0x3, 0x5c, "2970219b77e129557626f7d1625326f8240f652656a362b9c2c2196c341e909e74ffdab6af75a76aee9d0e84dfdb3e6f053d2e6d5b1fbe7d4c91abf6fd6e5276d3a4e2270b1ded13009e2881b32bdbf02a0685bf227d05af50d0fafe"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0x13}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x8001, 0x1f, 0x2, 0x1f, 0x4, 0x9, 0x3, 0x3, 0x2, 0x790, 0x3}}, &(0x7f0000000240)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000000280)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000002c0)={0x20, 0x87, 0x2, 0x40}, &(0x7f0000000300)={0x20, 0x89, 0x2, 0x1}}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r1, 0x82, 0x5, &(0x7f0000002340)='hello') syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000bc0)={0x14, &(0x7f0000000b00)={0x40, 0x11, 0x43, {0x43, 0xa, "f95e891da660354372093c43b07c075ee88619937dae4e725acc72d7411fc085e4d8e481a6fe42b230336c208d2a527b58dbabf1cfb3ae1739550b8577c781fa2d"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x44, &(0x7f0000000c00)={0x40, 0xd, 0x8d, "81618b8848bf4a665b98c6b19637cf8f1cd187a49145e9b832865457fc634558fa3ea2b7ec9d6ed424e3959c84330885a188b42bfc7e842dfa9f6c085624c46962fd74a99daa4d7df75ec892cc77bb7f62e2b44b0b91d9e0265f2e37aa9288650bfd67ecbc89ce239713bca022a38bdb4dee0667ee0ecfb5711733618d40b9ae6fce307f0a440716a5d2dbe6ac"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x3e}, &(0x7f0000000d00)={0x0, 0x8, 0x1}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0xff, 0x7, 0x2, 0x2, 0x6, 0x1, 0x8, 0x1ff, 0xe3, 0x8001, 0x1f, 0x8}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0x80}, &(0x7f0000000dc0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x3f}, &(0x7f0000000e40)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f0000000780)={0x40, 0x0, 0x48, {0x48, 0xd, "5fff1b57e08e82889d6adb4748d11a5b9e94714ea7007088e8e19da9807e109f6f89bb7393798bb70847c1b26319f898bc113b4f439edb3e4d91bf0fc0e84d8dbbf64e7d6fdc"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x20, 0x23, 0x2d, "4627a4242de3e0117f6794fa0b5301dce3c1d5372399ffa4843ba2927434f32a933ba15ee4fca3bb189771e61f"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x1f}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x80, 0x1c, {0x1, 0x0, 0xfffffff8, 0x1, 0x1, 0x7, 0x5, 0x9, 0x3, 0x7, 0x1f, 0x1f}}, &(0x7f0000000980)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000009c0)={0x20, 0x83, 0x2}, &(0x7f0000000a00)={0x20, 0x87, 0x2, 0xfff}, &(0x7f0000000a40)={0x20, 0x89, 0x2}}) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f00000003c0)={0x0, 0x3, 0x14, {0x14, 0x1e17c39e12a88a23, "d2778c238a3b7cd4f5b7ad2fa571be27fc7a"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x44, &(0x7f0000000480)={0x20, 0xc, 0xa8, "5d55fb16bfe6ef241c220a817dc41460e041230866a268c9a0ad26ef2806d10cd82c3b00c1d4fc0cd37cfe24adb73eda20f4d6f8045cb88cb093c44029a8fe1c0d1ad9067cb3cc3a62517641d1b097c8e92d0648b1e19c2cee9f8b29f3d29952f099a3bdffb7310daec264c0fc9f75e16fb92ea09e7ba23902b94b300ba4280455ddb43e5f2989403e5dc1a7fa55f5ef16f17357cbf1e0212449e479dfc085f031be9f2a07de3a21"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x22}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x1f, 0x0, 0x1, 0x3, 0x1, 0x1000, 0x881, 0x7f94, 0x7fb3, 0xfff8}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x2c2}, &(0x7f0000000640)={0x20, 0x83, 0x2}, &(0x7f0000000680)={0x20, 0x87, 0x2, 0x101}, &(0x7f00000006c0)={0x20, 0x89, 0x2, 0x1}}) 12:43:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:15 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:43:15 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) [ 2166.020975] Invalid option length (1047482) for dns_resolver key [ 2166.034439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.045090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2166.060600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2166.061847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 12:43:15 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:15 executing program 0: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:15 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$cgroup_pid(r0, 0x0, 0x0) 12:43:15 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:43:15 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:15 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:43:15 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2166.348078] Invalid option length (1047482) for dns_resolver key 12:43:28 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:28 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:43:28 executing program 0: gettid() syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:28 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:28 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:28 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:28 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) [ 2179.298255] Invalid option length (1047482) for dns_resolver key [ 2179.318224] Invalid option length (1047482) for dns_resolver key 12:43:28 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:28 executing program 1: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:28 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}}) dup2(r4, r3) 12:43:28 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2179.565128] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2179.565128] program syz-executor.3 not setting count and/or reply_len properly 12:43:39 executing program 1: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:39 executing program 0: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:39 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:39 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = gettid() capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9f, 0x2) 12:43:39 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}}) dup2(r4, r3) 12:43:39 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:39 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:39 executing program 6: clone3(&(0x7f0000000240)={0x10801080, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x4}, &(0x7f00000000c0)=""/6, 0x6, &(0x7f0000000100)=""/203, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x9}, 0x58) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2190.081388] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2190.081388] program syz-executor.3 not setting count and/or reply_len properly 12:43:39 executing program 0: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2190.141827] Invalid option length (1047482) for dns_resolver key [ 2190.161905] Invalid option length (1047482) for dns_resolver key 12:43:39 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = gettid() capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9f, 0x2) 12:43:39 executing program 1: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:39 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}}) dup2(r4, r3) [ 2190.322944] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2190.322944] program syz-executor.3 not setting count and/or reply_len properly 12:43:39 executing program 0: capset(0x0, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:39 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}}) 12:43:39 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:39 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:39 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = gettid() capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9f, 0x2) [ 2190.531363] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2190.531363] program syz-executor.3 not setting count and/or reply_len properly 12:43:39 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:49 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = gettid() capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 12:43:49 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:43:49 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:49 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040), 0x0) 12:43:49 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:49 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:43:49 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:43:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:49 executing program 1: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x40800, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:49 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) r8 = gettid() capset(&(0x7f0000000080)={0x20071026, r8}, &(0x7f0000000000)) [ 2200.583448] Invalid option length (1047482) for dns_resolver key [ 2200.588132] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2200.588132] program syz-executor.3 not setting count and/or reply_len properly [ 2200.626225] Invalid option length (1047482) for dns_resolver key 12:43:49 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:43:49 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) 12:43:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:43:49 executing program 0: capset(&(0x7f0000000080), &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) [ 2200.821152] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2200.821152] program syz-executor.3 not setting count and/or reply_len properly 12:44:00 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) gettid() 12:44:00 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:44:00 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) 12:44:00 executing program 0: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:00 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:00 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2211.813626] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2211.813626] program syz-executor.3 not setting count and/or reply_len properly [ 2211.829650] Invalid option length (1047482) for dns_resolver key 12:44:01 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x55, 0x8, 0x9, 0x81, 0x0, 0x6, 0x25000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) 12:44:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:44:01 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:44:01 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:44:01 executing program 0: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:01 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) 12:44:01 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:01 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) [ 2212.015607] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2212.015607] program syz-executor.3 not setting count and/or reply_len properly 12:44:01 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) 12:44:01 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) 12:44:01 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:44:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2212.149410] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2212.149410] program syz-executor.3 not setting count and/or reply_len properly 12:44:14 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:14 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:14 executing program 0: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:14 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:44:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:44:14 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:14 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) dup2(r6, r5) 12:44:14 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2225.761224] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2225.761224] program syz-executor.3 not setting count and/or reply_len properly [ 2225.781906] Invalid option length (1047482) for dns_resolver key 12:44:14 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) 12:44:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:44:15 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:15 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2225.930373] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2225.930373] program syz-executor.3 not setting count and/or reply_len properly 12:44:15 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:27 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:27 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:44:27 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:27 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:27 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:27 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:27 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', 0x0, 0x800, 0x0) [ 2237.992226] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2237.992226] program syz-executor.3 not setting count and/or reply_len properly [ 2238.000865] Invalid option length (1047482) for dns_resolver key 12:44:27 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) gettid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:27 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:44:27 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', 0x0, 0x800, 0x0) 12:44:27 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:44:27 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0xff, 0xa1, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100), 0xc}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:27 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:44:40 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:40 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:40 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:44:40 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', 0x0, 0x800, 0x0) 12:44:40 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:40 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:44:40 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:40 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) [ 2251.105433] Invalid option length (1047482) for dns_resolver key 12:44:40 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {0x0}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:40 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x4) 12:44:40 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:40 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:44:40 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:40 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:44:40 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:52 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:52 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:44:52 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:52 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:44:52 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:52 executing program 0: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:44:52 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 12:44:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:44:52 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, 0x0, 0x4, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x160) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept4(r1, &(0x7f0000000040)=@ethernet, &(0x7f00000000c0)=0x80, 0x0) [ 2263.247248] Invalid option length (1047482) for dns_resolver key [ 2263.256033] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2263.256033] program syz-executor.1 not setting count and/or reply_len properly 12:44:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:44:52 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:44:52 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:44:52 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:44:52 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) [ 2263.537278] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2263.537278] program syz-executor.1 not setting count and/or reply_len properly 12:45:02 executing program 5: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:45:02 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:45:02 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:02 executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, 0x0) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:02 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) 12:45:02 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 12:45:02 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2273.514066] Invalid option length (1047482) for dns_resolver key 12:45:02 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2273.562158] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2273.562158] program syz-executor.1 not setting count and/or reply_len properly 12:45:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) (fail_nth: 1) 12:45:02 executing program 5: gettid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) [ 2273.611496] FAULT_INJECTION: forcing a failure. [ 2273.611496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.612825] CPU: 1 UID: 0 PID: 24596 Comm: syz-executor.6 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2273.612846] Tainted: [W]=WARN [ 2273.612851] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2273.612859] Call Trace: [ 2273.612864] [ 2273.612869] dump_stack_lvl+0xfa/0x120 [ 2273.612897] should_fail_ex+0x4d7/0x5e0 [ 2273.612919] _copy_to_user+0x32/0xd0 [ 2273.612938] simple_read_from_buffer+0xe0/0x180 [ 2273.612962] proc_fail_nth_read+0x18a/0x240 [ 2273.612979] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2273.612994] ? security_file_permission+0x22/0x90 [ 2273.613017] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2273.613032] vfs_read+0x1eb/0xc70 [ 2273.613050] ? __pfx_vfs_read+0x10/0x10 [ 2273.613065] ? lock_release+0xc8/0x290 [ 2273.613084] ? __fget_files+0x20d/0x3b0 [ 2273.613105] ksys_read+0x121/0x240 [ 2273.613119] ? __pfx_ksys_read+0x10/0x10 [ 2273.613139] do_syscall_64+0xbf/0x360 [ 2273.613153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2273.613168] RIP: 0033:0x7fc868fc269c [ 2273.613178] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2273.613190] RSP: 002b:00007fc866585170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2273.613203] RAX: ffffffffffffffda RBX: 0000000000001770 RCX: 00007fc868fc269c [ 2273.613212] RDX: 000000000000000f RSI: 00007fc8665851e0 RDI: 0000000000000005 [ 2273.613220] RBP: 00007fc8665851d0 R08: 0000000000000000 R09: 0000000000000000 [ 2273.613228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.613236] R13: 00007ffe5d98281f R14: 00007fc866585300 R15: 0000000000022000 [ 2273.613255] 12:45:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:45:02 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:02 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 12:45:02 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40881) 12:45:02 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2273.832331] Invalid option length (1047482) for dns_resolver key 12:45:03 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x40881) 12:45:03 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x4, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:45:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2, 0x0) [ 2273.893334] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2273.893334] program syz-executor.1 not setting count and/or reply_len properly 12:45:15 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) pipe2(&(0x7f0000000040), 0x0) 12:45:15 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:15 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:45:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1267, 0x0) 12:45:15 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) (fail_nth: 1) 12:45:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 1) 12:45:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:15 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x40881) [ 2286.378962] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2286.378962] program syz-executor.1 not setting count and/or reply_len properly 12:45:15 executing program 5: syz_open_dev$sg(0x0, 0x0, 0x40881) [ 2286.406431] FAULT_INJECTION: forcing a failure. [ 2286.406431] name failslab, interval 1, probability 0, space 0, times 0 [ 2286.408386] CPU: 0 UID: 0 PID: 25038 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2286.408428] Tainted: [W]=WARN [ 2286.408436] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2286.408452] Call Trace: [ 2286.408461] [ 2286.408471] dump_stack_lvl+0xfa/0x120 [ 2286.408521] should_fail_ex+0x4d7/0x5e0 [ 2286.408559] ? getname_flags.part.0+0x48/0x540 [ 2286.408598] should_failslab+0xc2/0x120 [ 2286.408632] kmem_cache_alloc_noprof+0x72/0x690 [ 2286.408668] ? kernel_write+0x643/0x660 [ 2286.408706] ? getname_flags.part.0+0x48/0x540 [ 2286.408744] getname_flags.part.0+0x48/0x540 [ 2286.408786] getname_flags+0x95/0xe0 [ 2286.408814] user_path_at+0x27/0x90 [ 2286.408843] __x64_sys_umount+0xf8/0x190 [ 2286.408871] ? __pfx___x64_sys_umount+0x10/0x10 [ 2286.408912] do_syscall_64+0xbf/0x360 [ 2286.408940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2286.408968] RIP: 0033:0x7fd003ed1b19 [ 2286.408988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2286.409014] RSP: 002b:00007fd001447188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2286.409040] RAX: ffffffffffffffda RBX: 00007fd003fe4f60 RCX: 00007fd003ed1b19 [ 2286.409058] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001280 [ 2286.409074] RBP: 00007fd0014471d0 R08: 0000000000000000 R09: 0000000000000000 [ 2286.409089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2286.409105] R13: 00007ffc0548484f R14: 00007fd001447300 R15: 0000000000022000 [ 2286.409143] [ 2286.422745] Invalid option length (1047482) for dns_resolver key [ 2286.424590] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2286.424590] program syz-executor.3 not setting count and/or reply_len properly 12:45:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:45:15 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) wait4(r0, &(0x7f0000000200), 0x4, &(0x7f00000000c0)) 12:45:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 2) [ 2286.508350] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2286.508350] program syz-executor.1 not setting count and/or reply_len properly 12:45:15 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:45:26 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:45:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 3) 12:45:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1275, 0x0) 12:45:26 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) 12:45:26 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) 12:45:26 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) (fail_nth: 2) 12:45:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:26 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2296.853059] FAULT_INJECTION: forcing a failure. [ 2296.853059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2296.854803] CPU: 0 UID: 0 PID: 25262 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2296.854838] Tainted: [W]=WARN [ 2296.854845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2296.854858] Call Trace: [ 2296.854866] [ 2296.854874] dump_stack_lvl+0xfa/0x120 [ 2296.854916] should_fail_ex+0x4d7/0x5e0 [ 2296.854949] _copy_from_user+0x30/0xd0 [ 2296.854980] memdup_user+0x7e/0xe0 [ 2296.855004] strndup_user+0x78/0xe0 [ 2296.855026] __x64_sys_mount+0x136/0x300 [ 2296.855053] ? __pfx___x64_sys_mount+0x10/0x10 [ 2296.855090] do_syscall_64+0xbf/0x360 [ 2296.855114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2296.855137] RIP: 0033:0x7f4366462b19 [ 2296.855154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2296.855174] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2296.855196] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2296.855211] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2296.855225] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2296.855239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.855251] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2296.855284] [ 2296.903901] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2296.903901] program syz-executor.3 not setting count and/or reply_len properly [ 2296.906043] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2296.906043] program syz-executor.1 not setting count and/or reply_len properly [ 2296.909528] Invalid option length (1047482) for dns_resolver key 12:45:26 executing program 3: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:26 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) 12:45:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 4) 12:45:26 executing program 5: syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) [ 2297.035552] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2297.035552] program syz-executor.3 not setting count and/or reply_len properly [ 2297.040875] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2297.040875] program syz-executor.1 not setting count and/or reply_len properly 12:45:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1276, 0x0) 12:45:26 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) (fail_nth: 3) 12:45:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:26 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) [ 2297.180499] FAULT_INJECTION: forcing a failure. [ 2297.180499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2297.181613] CPU: 1 UID: 0 PID: 25447 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2297.181634] Tainted: [W]=WARN [ 2297.181638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2297.181647] Call Trace: [ 2297.181651] [ 2297.181660] dump_stack_lvl+0xfa/0x120 [ 2297.181688] should_fail_ex+0x4d7/0x5e0 [ 2297.181709] strncpy_from_user+0x3b/0x2f0 [ 2297.181732] getname_flags.part.0+0x8d/0x540 [ 2297.181754] getname_flags+0x95/0xe0 [ 2297.181767] user_path_at+0x27/0x90 [ 2297.181781] __x64_sys_umount+0xf8/0x190 [ 2297.181795] ? __pfx___x64_sys_umount+0x10/0x10 [ 2297.181815] do_syscall_64+0xbf/0x360 [ 2297.181829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2297.181844] RIP: 0033:0x7fd003ed1b19 [ 2297.181854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2297.181866] RSP: 002b:00007fd001447188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 2297.181879] RAX: ffffffffffffffda RBX: 00007fd003fe4f60 RCX: 00007fd003ed1b19 [ 2297.181888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020001280 [ 2297.181896] RBP: 00007fd0014471d0 R08: 0000000000000000 R09: 0000000000000000 [ 2297.181903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2297.181915] R13: 00007ffc0548484f R14: 00007fd001447300 R15: 0000000000022000 [ 2297.181934] [ 2297.202935] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2297.202935] program syz-executor.3 not setting count and/or reply_len properly [ 2297.206092] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2297.206092] program syz-executor.1 not setting count and/or reply_len properly 12:45:40 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 5) 12:45:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2201, 0x0) 12:45:40 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) (fail_nth: 4) 12:45:40 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:40 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) syz_open_pts(r1, 0x80000) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:40 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:40 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{0x0}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2311.053102] Invalid option length (1047482) for dns_resolver key [ 2311.054063] FAULT_INJECTION: forcing a failure. [ 2311.054063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.055057] CPU: 1 UID: 0 PID: 25511 Comm: syz-executor.2 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2311.055076] Tainted: [W]=WARN [ 2311.055080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.055088] Call Trace: [ 2311.055092] [ 2311.055097] dump_stack_lvl+0xfa/0x120 [ 2311.055123] should_fail_ex+0x4d7/0x5e0 [ 2311.055142] _copy_to_user+0x32/0xd0 [ 2311.055160] simple_read_from_buffer+0xe0/0x180 [ 2311.055182] proc_fail_nth_read+0x18a/0x240 [ 2311.055198] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2311.055212] ? security_file_permission+0x22/0x90 [ 2311.055233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2311.055247] vfs_read+0x1eb/0xc70 [ 2311.055265] ? __pfx_vfs_read+0x10/0x10 [ 2311.055278] ? lock_release+0xc8/0x290 [ 2311.055297] ? __fget_files+0x20d/0x3b0 [ 2311.055316] ksys_read+0x121/0x240 [ 2311.055329] ? __pfx_ksys_read+0x10/0x10 [ 2311.055348] do_syscall_64+0xbf/0x360 [ 2311.055361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2311.055374] RIP: 0033:0x7fd003e8469c [ 2311.055383] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2311.055395] RSP: 002b:00007fd001447170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2311.055407] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd003e8469c [ 2311.055415] RDX: 000000000000000f RSI: 00007fd0014471e0 RDI: 0000000000000003 [ 2311.055422] RBP: 00007fd0014471d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.055429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.055436] R13: 00007ffc0548484f R14: 00007fd001447300 R15: 0000000000022000 [ 2311.055454] 12:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2311.097862] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2311.097862] program syz-executor.1 not setting count and/or reply_len properly 12:45:40 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2311.122242] Invalid option length (1047482) for dns_resolver key 12:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:40 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x2) 12:45:40 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 6) 12:45:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2203, 0x0) 12:45:40 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:40 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x8) 12:45:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2311.409768] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2311.409768] program syz-executor.1 not setting count and/or reply_len properly [ 2311.414508] FAULT_INJECTION: forcing a failure. [ 2311.414508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2311.415538] CPU: 1 UID: 0 PID: 25734 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2311.415580] Tainted: [W]=WARN [ 2311.415588] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2311.415604] Call Trace: [ 2311.415612] [ 2311.415622] dump_stack_lvl+0xfa/0x120 [ 2311.415676] should_fail_ex+0x4d7/0x5e0 [ 2311.415705] _copy_from_user+0x30/0xd0 [ 2311.415723] memdup_user+0x7e/0xe0 [ 2311.415737] strndup_user+0x78/0xe0 [ 2311.415749] __x64_sys_mount+0x17f/0x300 [ 2311.415766] ? __pfx___x64_sys_mount+0x10/0x10 [ 2311.415786] do_syscall_64+0xbf/0x360 [ 2311.415800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2311.415814] RIP: 0033:0x7f4366462b19 [ 2311.415823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2311.415835] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2311.415848] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2311.415856] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2311.415864] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2311.415871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2311.415879] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2311.415896] 12:45:40 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x0, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:40 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x80000) 12:45:40 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) [ 2311.581124] Invalid option length (1047482) for dns_resolver key 12:45:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 7) 12:45:52 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x1000000) 12:45:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x0, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:52 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:45:52 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:45:52 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r2, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2205, 0x0) [ 2323.083232] Invalid option length (1047482) for dns_resolver key 12:45:52 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x2000000) 12:45:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2323.135395] FAULT_INJECTION: forcing a failure. [ 2323.135395] name failslab, interval 1, probability 0, space 0, times 0 [ 2323.136442] CPU: 1 UID: 0 PID: 25773 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2323.136461] Tainted: [W]=WARN [ 2323.136465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2323.136473] Call Trace: [ 2323.136478] [ 2323.136482] dump_stack_lvl+0xfa/0x120 [ 2323.136508] should_fail_ex+0x4d7/0x5e0 [ 2323.136526] ? getname_flags.part.0+0x48/0x540 [ 2323.136544] should_failslab+0xc2/0x120 [ 2323.136561] kmem_cache_alloc_noprof+0x72/0x690 [ 2323.136574] ? lock_release+0xc8/0x290 [ 2323.136593] ? getname_flags.part.0+0x48/0x540 [ 2323.136609] getname_flags.part.0+0x48/0x540 [ 2323.136627] getname_flags+0x95/0xe0 [ 2323.136640] user_path_at+0x27/0x90 [ 2323.136653] __x64_sys_mount+0x1e9/0x300 [ 2323.136672] ? __pfx___x64_sys_mount+0x10/0x10 [ 2323.136692] do_syscall_64+0xbf/0x360 [ 2323.136709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2323.136722] RIP: 0033:0x7f4366462b19 [ 2323.136731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2323.136743] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2323.136755] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2323.136763] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2323.136771] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2323.136778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2323.136785] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2323.136802] [ 2323.146882] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2323.146882] program syz-executor.1 not setting count and/or reply_len properly [ 2323.174018] Invalid option length (1047482) for dns_resolver key 12:45:52 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x8cffffff) 12:45:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:45:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 8) 12:46:04 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0xf6ffffff) 12:46:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2270, 0x0) 12:46:04 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x0, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:04 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 9) 12:46:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:04 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x0, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:04 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)=""/75, 0x4b}) 12:46:04 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2335.275995] Invalid option length (1047482) for dns_resolver key [ 2335.277336] FAULT_INJECTION: forcing a failure. [ 2335.277336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.279258] CPU: 1 UID: 0 PID: 26011 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2335.279296] Tainted: [W]=WARN [ 2335.279303] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.279317] Call Trace: [ 2335.279324] [ 2335.279333] dump_stack_lvl+0xfa/0x120 [ 2335.279379] should_fail_ex+0x4d7/0x5e0 [ 2335.279414] strncpy_from_user+0x3b/0x2f0 [ 2335.279456] getname_flags.part.0+0x8d/0x540 [ 2335.279496] getname_flags+0x95/0xe0 [ 2335.279520] user_path_at+0x27/0x90 [ 2335.279546] __x64_sys_mount+0x1e9/0x300 [ 2335.279574] ? __pfx___x64_sys_mount+0x10/0x10 [ 2335.279613] do_syscall_64+0xbf/0x360 [ 2335.279639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.279671] RIP: 0033:0x7f4366462b19 [ 2335.279689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.279711] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2335.279734] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2335.279750] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2335.279764] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.279778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.279792] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2335.279825] [ 2335.295200] Invalid option length (1047482) for dns_resolver key 12:46:04 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:04 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:04 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0xffffff8c) 12:46:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2271, 0x0) 12:46:04 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 10) [ 2335.550811] FAULT_INJECTION: forcing a failure. [ 2335.550811] name failslab, interval 1, probability 0, space 0, times 0 [ 2335.552522] CPU: 1 UID: 0 PID: 26170 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2335.552553] Tainted: [W]=WARN [ 2335.552559] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2335.552571] Call Trace: [ 2335.552577] [ 2335.552585] dump_stack_lvl+0xfa/0x120 [ 2335.552623] should_fail_ex+0x4d7/0x5e0 [ 2335.552658] should_failslab+0xc2/0x120 [ 2335.552683] __kmalloc_cache_noprof+0x73/0x690 [ 2335.552717] ? find_held_lock+0x2b/0x80 [ 2335.552748] ? __get_fs_type+0xe6/0x160 [ 2335.552770] ? alloc_fs_context+0x58/0x9e0 [ 2335.552795] ? alloc_fs_context+0x58/0x9e0 [ 2335.552811] ? _raw_read_unlock+0x1e/0x40 [ 2335.552838] alloc_fs_context+0x58/0x9e0 [ 2335.552863] path_mount+0xac7/0x1dd0 [ 2335.552887] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2335.552911] ? __pfx_path_mount+0x10/0x10 [ 2335.552933] ? kmem_cache_free+0x2a1/0x540 [ 2335.552951] ? putname.part.0+0x11b/0x160 [ 2335.552979] ? getname_flags.part.0+0x1c6/0x540 [ 2335.553010] ? putname.part.0+0x11b/0x160 [ 2335.553041] __x64_sys_mount+0x27b/0x300 [ 2335.553064] ? __pfx___x64_sys_mount+0x10/0x10 [ 2335.553096] do_syscall_64+0xbf/0x360 [ 2335.553118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2335.553138] RIP: 0033:0x7f4366462b19 [ 2335.553153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2335.553172] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2335.553191] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2335.553205] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2335.553217] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2335.553228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2335.553240] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2335.553268] 12:46:04 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:15 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x0, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 11) 12:46:15 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) 12:46:15 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x0, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:46:15 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0xfffffff6) 12:46:15 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x8000000000000) [ 2346.108210] Invalid option length (1047482) for dns_resolver key 12:46:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 12) 12:46:15 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) [ 2346.137339] Invalid option length (1047482) for dns_resolver key 12:46:15 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2275, 0x0) 12:46:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2346.219594] FAULT_INJECTION: forcing a failure. [ 2346.219594] name failslab, interval 1, probability 0, space 0, times 0 [ 2346.220636] CPU: 1 UID: 0 PID: 26287 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2346.220658] Tainted: [W]=WARN [ 2346.220662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2346.220669] Call Trace: [ 2346.220673] [ 2346.220678] dump_stack_lvl+0xfa/0x120 [ 2346.220703] should_fail_ex+0x4d7/0x5e0 [ 2346.220723] should_failslab+0xc2/0x120 [ 2346.220739] __kmalloc_cache_noprof+0x73/0x690 [ 2346.220758] ? trace_kmalloc+0x1f/0xb0 [ 2346.220772] ? __kmalloc_cache_noprof+0x26f/0x690 [ 2346.220789] ? debugfs_init_fs_context+0x45/0x110 [ 2346.220805] ? debugfs_init_fs_context+0x45/0x110 [ 2346.220816] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2346.220832] debugfs_init_fs_context+0x45/0x110 [ 2346.220844] ? __pfx_debugfs_init_fs_context+0x10/0x10 [ 2346.220856] alloc_fs_context+0x570/0x9e0 [ 2346.220873] path_mount+0xac7/0x1dd0 [ 2346.220888] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2346.220903] ? __pfx_path_mount+0x10/0x10 [ 2346.220917] ? kmem_cache_free+0x2a1/0x540 [ 2346.220927] ? putname.part.0+0x11b/0x160 [ 2346.220945] ? getname_flags.part.0+0x1c6/0x540 [ 2346.220964] ? putname.part.0+0x11b/0x160 [ 2346.220982] __x64_sys_mount+0x27b/0x300 [ 2346.220996] ? __pfx___x64_sys_mount+0x10/0x10 [ 2346.221016] do_syscall_64+0xbf/0x360 [ 2346.221030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2346.221043] RIP: 0033:0x7f4366462b19 [ 2346.221052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2346.221064] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2346.221077] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2346.221085] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2346.221092] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2346.221100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2346.221106] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2346.221124] 12:46:15 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x100000000000000) 12:46:15 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) dup2(0xffffffffffffffff, r1) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 13) 12:46:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x0, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2346.460648] Invalid option length (1047482) for dns_resolver key 12:46:28 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x200000000000000) 12:46:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2276, 0x0) 12:46:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x0, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:28 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:46:28 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, 0x0) 12:46:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 14) 12:46:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2358.934077] Invalid option length (1047482) for dns_resolver key 12:46:28 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x8cffffff00000000) [ 2359.003312] FAULT_INJECTION: forcing a failure. [ 2359.003312] name failslab, interval 1, probability 0, space 0, times 0 [ 2359.005132] CPU: 1 UID: 0 PID: 26606 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2359.005169] Tainted: [W]=WARN [ 2359.005177] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2359.005190] Call Trace: [ 2359.005198] [ 2359.005207] dump_stack_lvl+0xfa/0x120 [ 2359.005253] should_fail_ex+0x4d7/0x5e0 [ 2359.005288] should_failslab+0xc2/0x120 [ 2359.005318] __kmalloc_node_track_caller_noprof+0xc1/0x6e0 [ 2359.005348] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2359.005380] ? vfs_parse_fs_string+0xc3/0x150 [ 2359.005419] ? __create_object+0x59/0x80 [ 2359.005458] ? kmemdup_nul+0x3b/0xa0 [ 2359.005478] ? trace_kmalloc+0x1f/0xb0 [ 2359.005506] kmemdup_nul+0x3b/0xa0 [ 2359.005529] vfs_parse_fs_string+0xc3/0x150 [ 2359.005567] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 2359.005605] ? __kasan_kmalloc+0x7f/0x90 [ 2359.005640] ? alloc_fs_context+0x5c0/0x9e0 [ 2359.005677] path_mount+0x65f/0x1dd0 [ 2359.005706] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2359.005735] ? __pfx_path_mount+0x10/0x10 [ 2359.005763] ? kmem_cache_free+0x2a1/0x540 [ 2359.005784] ? putname.part.0+0x11b/0x160 [ 2359.005818] ? getname_flags.part.0+0x1c6/0x540 [ 2359.005856] ? putname.part.0+0x11b/0x160 [ 2359.005894] __x64_sys_mount+0x27b/0x300 [ 2359.005922] ? __pfx___x64_sys_mount+0x10/0x10 [ 2359.005961] do_syscall_64+0xbf/0x360 [ 2359.005988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2359.006013] RIP: 0033:0x7f4366462b19 [ 2359.006031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2359.006053] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2359.006077] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2359.006093] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2359.006107] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2359.006121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2359.006135] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2359.006169] 12:46:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:46:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2279, 0x0) 12:46:28 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 15) 12:46:28 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0xf6ffffff00000000) 12:46:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 16) 12:46:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227a, 0x0) 12:46:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:46:43 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = fork() capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f00000000c0)={0x1, 0x3ff, 0x8, 0xffff, 0x80, 0x9b75}) 12:46:43 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:43 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={0x0}) 12:46:43 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227b, 0x0) [ 2374.199259] Invalid option length (1047482) for dns_resolver key [ 2374.201960] FAULT_INJECTION: forcing a failure. [ 2374.201960] name failslab, interval 1, probability 0, space 0, times 0 [ 2374.206482] CPU: 0 UID: 0 PID: 26851 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2374.206553] Tainted: [W]=WARN [ 2374.206565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2374.206585] Call Trace: [ 2374.206596] [ 2374.206609] dump_stack_lvl+0xfa/0x120 [ 2374.206681] should_fail_ex+0x4d7/0x5e0 [ 2374.206719] ? alloc_vfsmnt+0x23/0x6e0 [ 2374.206751] should_failslab+0xc2/0x120 [ 2374.206784] kmem_cache_alloc_noprof+0x72/0x690 [ 2374.206816] ? find_held_lock+0x2b/0x80 [ 2374.206862] ? alloc_vfsmnt+0x23/0x6e0 [ 2374.206894] alloc_vfsmnt+0x23/0x6e0 [ 2374.206930] vfs_create_mount.part.0+0x40/0x440 [ 2374.206973] path_mount+0x1637/0x1dd0 [ 2374.207004] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2374.207036] ? __pfx_path_mount+0x10/0x10 [ 2374.207069] ? putname.part.0+0x11b/0x160 [ 2374.207114] ? putname.part.0+0x11b/0x160 [ 2374.207155] __x64_sys_mount+0x27b/0x300 [ 2374.207187] ? __pfx___x64_sys_mount+0x10/0x10 [ 2374.207231] do_syscall_64+0xbf/0x360 [ 2374.207259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2374.207286] RIP: 0033:0x7f4366462b19 [ 2374.207306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2374.207331] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2374.207357] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2374.207374] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2374.207390] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2374.207406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2374.207421] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2374.207459] [ 2374.221159] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2374.221159] program syz-executor.1 not setting count and/or reply_len properly 12:46:43 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:46:43 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 17) 12:46:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) waitid(0x2, 0x0, &(0x7f0000000000), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227c, 0x0) [ 2374.396821] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2374.396821] program syz-executor.1 not setting count and/or reply_len properly 12:46:43 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={0x0}) 12:46:43 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pread64(r3, &(0x7f0000000140)=""/222, 0xde, 0x6fd8b38a) close_range(r1, r2, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:46:43 executing program 1: waitid(0x89df7e5308cbe5cb, 0x0, 0x0, 0x4, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:43 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:46:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2374.577274] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2374.577274] program syz-executor.1 not setting count and/or reply_len properly 12:46:55 executing program 7: r0 = fork() process_vm_writev(r0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000700)=""/235, 0xeb}, {&(0x7f0000000800)=""/37, 0x25}, {&(0x7f0000000840)=""/129, 0x81}], 0x4, &(0x7f0000000b40)=[{&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/60, 0x3c}, {&(0x7f0000000a80)=""/76, 0x4c}, {&(0x7f0000000b00)=""/24, 0x18}], 0x5, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000c40)={0x0}) 12:46:55 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0x39, 0x29, 0xfffffc00, 0x9, 0x5, 0x6}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:46:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:46:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227d, 0x0) 12:46:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:55 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:46:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:46:55 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 18) [ 2386.597117] Invalid option length (1047482) for dns_resolver key [ 2386.599104] FAULT_INJECTION: forcing a failure. [ 2386.599104] name failslab, interval 1, probability 0, space 0, times 0 [ 2386.600046] CPU: 1 UID: 0 PID: 27396 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2386.600067] Tainted: [W]=WARN [ 2386.600072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2386.600080] Call Trace: [ 2386.600085] [ 2386.600091] dump_stack_lvl+0xfa/0x120 [ 2386.600121] should_fail_ex+0x4d7/0x5e0 [ 2386.600143] should_failslab+0xc2/0x120 [ 2386.600162] __kmalloc_node_track_caller_noprof+0xc1/0x6e0 [ 2386.600180] ? kstrdup_const+0x57/0x80 [ 2386.600194] ? find_held_lock+0x2b/0x80 [ 2386.600218] ? kstrdup+0x3e/0xc0 [ 2386.600228] kstrdup+0x3e/0xc0 [ 2386.600240] kstrdup_const+0x57/0x80 [ 2386.600252] alloc_vfsmnt+0xee/0x6e0 [ 2386.600274] vfs_create_mount.part.0+0x40/0x440 [ 2386.600296] path_mount+0x1637/0x1dd0 [ 2386.600313] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2386.600329] ? __pfx_path_mount+0x10/0x10 [ 2386.600345] ? putname.part.0+0x11b/0x160 [ 2386.600368] ? putname.part.0+0x11b/0x160 [ 2386.600389] __x64_sys_mount+0x27b/0x300 [ 2386.600404] ? __pfx___x64_sys_mount+0x10/0x10 [ 2386.600426] do_syscall_64+0xbf/0x360 [ 2386.600441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2386.600455] RIP: 0033:0x7f4366462b19 [ 2386.600465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2386.600478] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2386.600492] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2386.600501] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2386.600509] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2386.600518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2386.600526] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2386.600544] [ 2386.652625] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2386.652625] program syz-executor.1 not setting count and/or reply_len properly 12:47:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 19) 12:47:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227a, 0x0) 12:47:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227e, 0x0) 12:47:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:06 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x8000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_9p2000}, {@cache_fscache}, {@version_L}, {@msize={'msize', 0x3d, 0x60f}}, {@cache_fscache}, {@noextend}, {@posixacl}, {@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}], [{@fsmagic={'fsmagic', 0x3d, 0x1000}}, {@smackfstransmute={'smackfstransmute', 0x3d, '[&!!'}}]}}) 12:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) [ 2397.727886] Invalid option length (1047482) for dns_resolver key 12:47:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) 12:47:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x227f, 0x0) 12:47:07 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 20) 12:47:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:47:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:07 executing program 2: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x100) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:47:07 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) 12:47:07 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2282, 0x0) 12:47:07 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:07 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 21) 12:47:07 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:47:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2398.303619] FAULT_INJECTION: forcing a failure. [ 2398.303619] name failslab, interval 1, probability 0, space 0, times 0 [ 2398.305709] CPU: 1 UID: 0 PID: 28060 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2398.305746] Tainted: [W]=WARN [ 2398.305753] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2398.305766] Call Trace: [ 2398.305774] [ 2398.305784] dump_stack_lvl+0xfa/0x120 [ 2398.305826] should_fail_ex+0x4d7/0x5e0 [ 2398.305859] should_failslab+0xc2/0x120 [ 2398.305888] __kmalloc_cache_noprof+0x73/0x690 [ 2398.305921] ? lookup_mnt+0x193/0x550 [ 2398.305943] ? lock_release+0xc8/0x290 [ 2398.305968] ? get_mountpoint+0xee/0x470 [ 2398.306003] ? get_mountpoint+0xee/0x470 [ 2398.306030] get_mountpoint+0xee/0x470 [ 2398.306061] do_lock_mount+0x24a/0x580 [ 2398.306088] ? __pfx_do_lock_mount+0x10/0x10 [ 2398.306113] ? ktime_get_real_seconds+0x9/0x20 [ 2398.306136] ? mnt_warn_timestamp_expiry+0x14a/0x620 [ 2398.306172] path_mount+0x167f/0x1dd0 [ 2398.306198] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2398.306226] ? __pfx_path_mount+0x10/0x10 [ 2398.306254] ? putname.part.0+0x11b/0x160 [ 2398.306293] ? putname.part.0+0x11b/0x160 [ 2398.306329] __x64_sys_mount+0x27b/0x300 [ 2398.306355] ? __pfx___x64_sys_mount+0x10/0x10 [ 2398.306394] do_syscall_64+0xbf/0x360 [ 2398.306418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2398.306442] RIP: 0033:0x7f4366462b19 [ 2398.306459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2398.306480] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2398.306504] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2398.306519] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2398.306533] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2398.306546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2398.306559] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2398.306594] [ 2398.347326] Invalid option length (1047482) for dns_resolver key 12:47:18 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) 12:47:18 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:18 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 22) 12:47:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:18 executing program 2: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x0, 0x2001, 0xfffffffe, 0x0, 0x1, 0x3}) capset(&(0x7f00000002c0)={0x19980330}, &(0x7f0000000300)={0x0, 0x4, 0xfffffc01, 0x2, 0x9, 0x9}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) getpgrp(0xffffffffffffffff) mount(&(0x7f0000000040)=ANY=[@ANYBLOB=' \b0\x00'], &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)='sysfs\x00', 0x2002410, &(0x7f0000000140)='!)@&*\'\x00') mount$9p_tcp(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x3022000, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532342c70726976706f72742c6e6f6465766d61702c6163636573733d616e792c7375626a5f757365723d2c2c636f6e7465ec4be2e16e636f6e66696e65645f752c00"]) 12:47:18 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:47:18 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2283, 0x0) [ 2409.817260] Invalid option length (1047482) for dns_resolver key 12:47:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:19 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 23) 12:47:19 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) 12:47:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:47:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) 12:47:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) [ 2410.014537] FAULT_INJECTION: forcing a failure. [ 2410.014537] name failslab, interval 1, probability 0, space 0, times 0 [ 2410.016266] CPU: 1 UID: 0 PID: 28332 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2410.016303] Tainted: [W]=WARN [ 2410.016310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2410.016323] Call Trace: [ 2410.016332] [ 2410.016341] dump_stack_lvl+0xfa/0x120 [ 2410.016385] should_fail_ex+0x4d7/0x5e0 [ 2410.016420] should_failslab+0xc2/0x120 [ 2410.016450] __kmalloc_cache_noprof+0x73/0x690 [ 2410.016485] ? __lock_acquire+0xc65/0x1b70 [ 2410.016513] ? get_mountpoint+0xee/0x470 [ 2410.016552] ? get_mountpoint+0xee/0x470 [ 2410.016580] get_mountpoint+0xee/0x470 [ 2410.016611] attach_recursive_mnt+0x202/0x1770 [ 2410.016647] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 2410.016681] ? do_raw_spin_unlock+0x53/0x220 [ 2410.016714] ? get_mountpoint+0x163/0x470 [ 2410.016745] ? do_lock_mount+0x2aa/0x580 [ 2410.016772] graft_tree+0x184/0x210 [ 2410.016799] do_add_mount+0x1cb/0x330 [ 2410.016830] path_mount+0x173e/0x1dd0 [ 2410.016856] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2410.016885] ? __pfx_path_mount+0x10/0x10 [ 2410.016913] ? putname.part.0+0x11b/0x160 [ 2410.016952] ? putname.part.0+0x11b/0x160 [ 2410.016988] __x64_sys_mount+0x27b/0x300 [ 2410.017015] ? __pfx___x64_sys_mount+0x10/0x10 [ 2410.017052] do_syscall_64+0xbf/0x360 [ 2410.017077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2410.017101] RIP: 0033:0x7f4366462b19 [ 2410.017118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2410.017140] RSP: 002b:00007f43639d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2410.017163] RAX: ffffffffffffffda RBX: 00007f4366575f60 RCX: 00007f4366462b19 [ 2410.017178] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000020000040 [ 2410.017192] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2410.017207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2410.017220] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2410.017254] 12:47:19 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 12:47:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:47:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2285, 0x0) 12:47:19 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) 12:47:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 24) 12:47:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2286, 0x0) 12:47:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:31 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:31 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) 12:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) 12:47:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:31 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = getpgid(0x0) capset(&(0x7f0000000300)={0x20080522, r0}, &(0x7f0000000380)={0x1000, 0x730, 0xc1, 0x3, 0x5, 0xc1}) syz_mount_image$iso9660(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)={0x3, 0x4000000, 0x20, 0x7, 0x200, 0x2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) capset(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000200)={0x3, 0x20, 0x3, 0x0, 0x8d, 0x1000}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'os2.', 'trans=fd,'}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x3000000) 12:47:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) (fail_nth: 25) [ 2421.904098] FAULT_INJECTION: forcing a failure. [ 2421.904098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2421.905116] CPU: 1 UID: 0 PID: 28582 Comm: syz-executor.0 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2421.905136] Tainted: [W]=WARN [ 2421.905140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2421.905147] Call Trace: [ 2421.905152] [ 2421.905157] dump_stack_lvl+0xfa/0x120 [ 2421.905184] should_fail_ex+0x4d7/0x5e0 [ 2421.905204] _copy_to_user+0x32/0xd0 [ 2421.905222] simple_read_from_buffer+0xe0/0x180 [ 2421.905244] proc_fail_nth_read+0x18a/0x240 [ 2421.905260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2421.905274] ? security_file_permission+0x22/0x90 [ 2421.905296] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2421.905309] vfs_read+0x1eb/0xc70 [ 2421.905327] ? __pfx_vfs_read+0x10/0x10 [ 2421.905341] ? lock_release+0xc8/0x290 [ 2421.905359] ? __fget_files+0x20d/0x3b0 [ 2421.905378] ksys_read+0x121/0x240 [ 2421.905391] ? __pfx_ksys_read+0x10/0x10 [ 2421.905410] do_syscall_64+0xbf/0x360 [ 2421.905423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2421.905436] RIP: 0033:0x7f436641569c [ 2421.905446] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2421.905458] RSP: 002b:00007f43639d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2421.905470] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f436641569c [ 2421.905479] RDX: 000000000000000f RSI: 00007f43639d81e0 RDI: 0000000000000003 [ 2421.905486] RBP: 00007f43639d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 2421.905493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2421.905500] R13: 00007ffc3fe2fe7f R14: 00007f43639d8300 R15: 0000000000022000 [ 2421.905518] [ 2421.948399] Invalid option length (1047482) for dns_resolver key 12:47:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:47:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:47:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:31 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:47:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:47:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2288, 0x0) 12:47:31 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getdents(r0, &(0x7f0000000140)=""/135, 0x87) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:47:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2289, 0x0) 12:47:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:41 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000300)={0xffff8000, 0x8, 0x0, 0x10c8, 0x4, 0x6}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x1000) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) capset(&(0x7f0000000280)={0x19980330, r1}, &(0x7f00000002c0)={0x5, 0x6cf, 0x7ff, 0x2, 0xe0000000, 0x4}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[@ANYBLOB="00fb980190d26bd1ef36be7b5790c66a5fee9ab3b6b513ef084be795b05bfc3daa3a0c34a17de680345400f36a2759a08dbd43e0e1cc2321d411a971adcc99925b32c6e71c03eb15c49a3936f0bff04ef61c75e9db605b908243c0af5aab99b836a7282203f91a802bcfd52a76991d66f55788cc1fbd092d603d259ac0444dd5b1ed8ef878a8c8ff6543e3c30d3ff77c11e86b735953b8b14a64890660c47224e578115c17a4fe2b9dccc0cbc04d6c91a7bbbefe708365159cbe70caded2b7023fe9d33a05b3d0b2a04d6282"], 0x98, 0x0) 12:47:41 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:41 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2, 0x0) 12:47:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:47:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:47:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x4b47, 0x0) [ 2432.361089] Invalid option length (1047482) for dns_resolver key 12:47:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:47:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3, 0x0) 12:47:52 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:47:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x4b49, 0x0) 12:47:52 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x1, 0x3}, 0x40, 0x4, 0xfffffffc, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x403}, r0, 0xa, r3, 0x10) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f00000000c0)={0x40, 0x81, 0x3, 0x0, 0x6, 0x6}) 12:47:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:47:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x6, 0x0) [ 2443.543542] Invalid option length (1047482) for dns_resolver key 12:47:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:47:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/347], 0x2b6) 12:47:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:47:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x8, 0x0) 12:47:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5382, 0x0) 12:47:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2272, 0x0) 12:47:52 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) [ 2443.755051] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2443.755051] program syz-executor.3 not setting count and/or reply_len properly 12:48:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5385, 0x0) 12:48:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:48:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:05 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 12:48:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4e, 0x0) 12:48:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:48:05 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) [ 2456.624638] Invalid option length (1047482) for dns_resolver key 12:48:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5386, 0x0) 12:48:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:05 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:48:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf0, 0x0) 12:48:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:48:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:48:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(0xffffffffffffffff, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x300, 0x0) 12:48:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x541b, 0x0) 12:48:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:48:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:48:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:48:16 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000400)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) lsetxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES32, @ANYBLOB="0200c955", @ANYRES32=r1, @ANYBLOB="02000400", @ANYRES32=0xee01, @ANYBLOB="040001000000000008000400", @ANYRES32=r2, @ANYBLOB="10000300008000002000000000000000"], 0x4c, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r3 = getpgid(0xffffffffffffffff) capset(&(0x7f00000001c0)={0x19980330, r3}, &(0x7f0000000200)={0xff, 0xfffffffe, 0x6b, 0x80000, 0x80000001, 0x2}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000000)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r7 = dup2(r6, r5) write$binfmt_aout(r7, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r4, 0xa, r7, 0x12) capset(&(0x7f0000000140)={0x19980330, r4}, &(0x7f0000000180)={0x8, 0xa0, 0x5, 0x8, 0x0, 0x2}) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x5, 0x7, 0xffff, 0xa15, 0x7, 0x4}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:48:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:48:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x600, 0x0) [ 2467.601616] Invalid option length (1047482) for dns_resolver key 12:48:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f28783405747484242"], 0x2b6) 12:48:16 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5421, 0x0) 12:48:16 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000240)={0x2, 0x1, 0xfffffffe, 0x5, 0x3096c59, 0x1}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0xe6, 0x5a6, 0x8000, "2a74d397760db56b9169210d04f6745eae36676e3dad01f85ac9c839716b50e6dc086384e36b4e73998a5992c78ce3ff08bee4ff554b3bf8f563737142dc2d4258125b72df0ee2498d577d70fc6dd5a68642eb86388307d85bd08235d3b8f6d1231a8d2fceb2fdc9602dcced172b673a5bc2e1d18ad88ed79cfdba79d5483be5693a560b549ea50d3f65ebac07d341c8833cfe9280c7c8d0184991cf8861c4bfb7badda92430aa8cb0e012d83c1271b4ce6a668213ba7c91b33f201e7ebbc848d2450f698c9f47dbc73ef8c58b5d8716e1f5327847be3788f0a688d8fb2d97b1807dc02a512c"}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 12:48:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) [ 2467.781214] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2467.781214] program syz-executor.3 not setting count and/or reply_len properly 12:48:17 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1020, 0x0) 12:48:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, 0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:17 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) 12:48:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5450, 0x0) 12:48:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:48:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) 12:48:30 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2000, 0x0) 12:48:30 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2272, 0x0) 12:48:30 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:48:30 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x9) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x44802, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r6, 0x12) capset(&(0x7f0000000180), &(0x7f00000001c0)={0x80, 0x0, 0x5d9f0f29, 0x1, 0x2, 0x9}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x4, 0x9, 0x85, 0x0, 0x6, 0xc926, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000140)}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x8, 0x80, 0x6, 0x9588, 0x8, 0x9}) 12:48:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) 12:48:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5451, 0x0) [ 2480.990068] Invalid option length (1047482) for dns_resolver key 12:48:30 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x1274, 0x0) 12:48:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:48:30 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2010, 0x0) 12:48:30 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/694], 0x2b6) 12:48:30 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5452, 0x0) 12:48:30 executing program 2: capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) syz_open_procfs(r0, &(0x7f0000000040)='sched\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) read(r5, &(0x7f0000000140)=""/23, 0x17) 12:48:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:48:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) 12:48:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x5460, 0x0) 12:48:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:48:43 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:48:43 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3f00, 0x0) 12:48:43 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f00000001c0)=0x1) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000280), 0x2}, 0x40, 0x7, 0x2000, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x3, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12) capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)={0x0, 0x101, 0x4260, 0x4f3, 0x16c6, 0x7f}) r6 = getpgid(0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000008, 0x810, r5, 0xcdac8000) capset(&(0x7f0000000040)={0x20071026, r6}, &(0x7f00000000c0)={0x1000, 0x1000, 0x9, 0x1000, 0x7fffffff, 0x7fffffff}) 12:48:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f9"], 0x2b6) [ 2494.196074] Invalid option length (1047482) for dns_resolver key [ 2494.220104] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2494.220104] program syz-executor.3 not setting count and/or reply_len properly 12:48:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2272, 0x0) 12:48:43 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4000, 0x0) 12:48:43 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x40049409, 0x0) 12:48:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) 12:48:43 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:48:43 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000280)='./file0\x00', 0x100, 0x0, 0x0, 0x44, 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x100000, &(0x7f0000000200)='\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x8) 12:48:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:48:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x40086602, 0x0) 12:48:53 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0xfffffffe, 0xccd6, 0x0, 0x1, 0x5e9fb0f2}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:48:53 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:48:53 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:48:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, 0x0, 0x2b6) 12:48:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:48:53 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4e00, 0x0) 12:48:53 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2504.764331] Invalid option length (1047482) for dns_resolver key 12:48:53 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xedc0, 0x0) [ 2504.797513] Invalid option length (1047482) for dns_resolver key 12:48:54 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x91d, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140), 0x0, 0xc9e}, {&(0x7f0000000180)="1fc1812b6820d5b98986fe51cd10919a63f634521c0d76c21f875b541ac8f636022a903814e92f2cb9daed1dcd7acaac92177896714278100a9594a45de88428b3793be614fe3b4be5c9c83bf6b6b933a7fde27911a62facfccbcbd98937b28fa50d454f5a71a350aa0bf805df19f51bd2745e993081cffb", 0x78, 0x2}, {&(0x7f0000000200)="7cdc4f814221e425b42e7c548c7275b8b82ba0cd80ad944dc05b38d51121afdf0289ea7f4f97d9db5842c7363fccb6672e1f4d340fb75f41349a0c43b73046ec5c0fce9a26145390685c2d0767dc09e0ebbd8a0fa56c60e697972a0def675c70b587b663c3c5b9720a0c79c0d64bf9058bcb0619b34a39e65dc1949be1f2ab46be86ebc41f460b00e97263f8498801c5fd29b86b83acb29db51b657a5d56d5d59c9a7c2185909fa8b07893cf469ef7bff8f15bf47e1e88debf358ca9eb5de1a0bb42477004108a488fb3249f9c50062376", 0xd1, 0x100000000}], 0x8, &(0x7f00000004c0)={[{@nodots}, {@dots}, {@dots}, {@dots}], [{@subj_user}, {@euid_lt={'euid<', r0}}, {@audit}, {@uid_gt={'uid>', 0xee00}}, {@obj_type={'obj_type', 0x3d, '-,]'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x37, 0x38, 0x33, 0x37, 0x66, 0x37, 0x38], 0x2d, [0x0, 0x44aa75b6872c989, 0x37, 0x65], 0x2d, [0x1b, 0x39, 0x63, 0x33], 0x2d, [0x0, 0xf, 0x33, 0x53], 0x2d, [0x66, 0x35, 0x35, 0x61, 0x36, 0x0, 0x37, 0x30]}}}, {@obj_type={'obj_type', 0x3d, '[$&}-'}}, {@subj_role={'subj_role', 0x3d, '&.#'}}]}) 12:48:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:48:54 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:48:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x40087602, 0x0) 12:48:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) [ 2504.962131] loop2: detected capacity change from 0 to 264192 12:48:54 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf000, 0x0) 12:48:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a534"], 0x2b6) 12:48:54 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:48:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x401c5820, 0x0) [ 2505.099770] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2505.099770] program syz-executor.3 not setting count and/or reply_len properly 12:49:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x80000, 0x0) 12:49:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:49:06 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x20000, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:49:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) 12:49:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x4020940d, 0x0) 12:49:06 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:06 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x1274, 0x0) 12:49:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0x2b6) 12:49:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x80086601, 0x0) 12:49:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) [ 2517.392957] Invalid option length (1047482) for dns_resolver key 12:49:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf0ffff, 0x0) [ 2517.402157] Invalid option length (1047482) for dns_resolver key 12:49:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) 12:49:06 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x600, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:49:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:49:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:49:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1000000, 0x0) 12:49:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x80087601, 0x0) 12:49:06 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000140)={0x20071026}, &(0x7f00000000c0)={0xe7, 0x37, 0xd, 0x0, 0x9, 0xfffffffe}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/168, 0xa8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472f7000000200000003f2024fa00", @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB="2cff"]) accept4(r0, &(0x7f0000000180)=@can, &(0x7f0000000040)=0x80, 0x0) getpid() umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:49:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:49:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x80111500, 0x0) 12:49:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) 12:49:06 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2517.794388] Invalid option length (1047482) for dns_resolver key 12:49:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:16 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:49:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f287834057474842427385d9285712f1a500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/347], 0x2b6) 12:49:16 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r2, 0x13) capset(&(0x7f0000000040)={0xdf3a8a47cf755aa3, r0}, &(0x7f00000000c0)={0x80000000, 0x5, 0x3, 0x200, 0x401, 0x8}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:49:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x801c581f, 0x0) 12:49:16 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2000000, 0x0) 12:49:16 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x1274, 0x0) [ 2527.839985] Invalid option length (1047482) for dns_resolver key 12:49:17 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x80811501, 0x0) [ 2527.870769] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2527.870769] program syz-executor.1 not setting count and/or reply_len properly 12:49:17 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3, 0x0) [ 2527.884977] Invalid option length (1047482) for dns_resolver key 12:49:17 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba01000003000000"], 0x2b6) 12:49:17 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3000000, 0x0) 12:49:17 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:49:17 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2528.015734] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2528.015734] program syz-executor.3 not setting count and/or reply_len properly 12:49:17 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0xc0045878, 0x0) 12:49:17 executing program 2: capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000000)={0x0, 0x7fff, 0x0, 0x0, 0x8001}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2528.075162] Invalid option length (1047482) for dns_resolver key 12:49:29 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:49:29 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x6000000, 0x0) 12:49:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:49:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:49:29 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r6], 0x102, 0x1) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x400, 0x2, 0x6, 0x7, 0xfffff533}) 12:49:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0xc0045878, 0x0) 12:49:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) [ 2540.124442] Invalid option length (1047482) for dns_resolver key 12:49:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x2b6) 12:49:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:49:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:49:29 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:49:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0xc0189436, 0x0) 12:49:29 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x20000000, 0x0) 12:49:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f97fe74a78880041a2aac9ef64f60bcc048ebe7c820ec9cfd30c460b054a6dd19f2014e94369ce55f50dbae656133ee4290eb076d7e8741926b0d6a25c9dc1a558fa64832bf9f2b5ae190fdcee67f28783405747484242"], 0x2b6) 12:49:29 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018002000", @ANYRES32=r0, @ANYBLOB="ff7f0000000000002e2f66696c653000"]) [ 2540.515047] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2540.515047] program syz-executor.1 not setting count and/or reply_len properly 12:49:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:49:41 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x0, 0x111, 0x7, 0x80000001, 0x6, 0x7ff}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) 12:49:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) 12:49:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:49:41 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:49:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0xc020660b, 0x0) 12:49:41 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x20100000, 0x0) 12:49:41 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) [ 2552.741772] Invalid option length (1047482) for dns_resolver key 12:49:41 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) 12:49:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0xc0481273, 0x0) 12:49:51 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(0x0, 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:49:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc0300000900"], 0x2b6) 12:49:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v'], 0x2b6) 12:49:51 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:49:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3f000000, 0x0) 12:49:51 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) 12:49:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x20, 0x1, &(0x7f0000000180)=[{&(0x7f0000000100)="1c3c6a93553d450a874c3207633a3a564d0645bb16cb35cb9ff8ae2b5247fd69860b84aba9e519524b1c2e9cc462f6a0de65c0e9804dc4273bed699d7828f873902bf7e40637e9626436126637e28afa84736deb", 0x54, 0x4}], 0x1200010, &(0x7f00000001c0)={[{@nouser_xattr}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@obj_role={'obj_role', 0x3d, '/$'}}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000240)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = dup2(r4, r0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x1, 0x5ad1, 0x924, 0x0, 0x16, "6b45aa69dfd836e09f6b99ca4a0b846c928d9c"}) 12:49:51 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x81, 0x400000) linkat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2562.793955] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2562.793955] program syz-executor.3 not setting count and/or reply_len properly [ 2562.836832] Invalid option length (1047482) for dns_resolver key [ 2562.852274] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 2563.650023] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 12:50:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:50:05 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) 12:50:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x458b00, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8200, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="e657b620d3e1") r3 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:50:05 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x89d7, 0x1ff, 0x3fff8}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:50:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:50:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a5345c997268559ba20e258140c256198a8fe1dd2cd03ca240f25b5e0f5ce8153b3dc9a0e17ae6be77aa2391f9"], 0x2b6) 12:50:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x40000000, 0x0) [ 2576.285369] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2576.285369] program syz-executor.1 not setting count and/or reply_len properly [ 2576.332362] Invalid option length (1047482) for dns_resolver key 12:50:05 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:50:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:50:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4e000000, 0x0) 12:50:05 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x800000, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:50:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:50:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="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"]) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) r4 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000340)=0x1) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$SG_GET_SG_TABLESIZE(r6, 0x227f, &(0x7f0000000380)) 12:50:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:50:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x8cffffff, 0x0) 12:50:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:50:06 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:06 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:06 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc"], 0x2b6) 12:50:06 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:50:06 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) [ 2577.047827] Invalid option length (1047482) for dns_resolver key [ 2577.144321] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2577.144321] program syz-executor.3 not setting count and/or reply_len properly 12:50:19 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x10010, r2, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, 0xffffffffffffffff, 0x10000000) r5 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) poll(&(0x7f0000000400)=[{r6, 0x2810}, {0xffffffffffffffff, 0x8100}, {r5, 0x2000}, {r6, 0x504}, {0xffffffffffffffff, 0x8006}, {0xffffffffffffffff, 0x44c}, {r6, 0x100}], 0x7, 0x2009) r7 = syz_io_uring_setup(0x2362, &(0x7f0000000280)={0x0, 0x200, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000003ac0)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0xc, 0x0, r8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r8) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000040)=0x80, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x0, 0x80000, 0x1, {0x0, r8}}, 0x20) 12:50:19 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:50:19 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:50:19 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:50:19 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:19 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf0ffffff, 0x0) 12:50:19 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba010000030000000000000000000000d13db756c8fe6990af8243a534"], 0x2b6) 12:50:19 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) [ 2590.705365] Invalid option length (1047482) for dns_resolver key [ 2590.720615] sg_write: data in/out 747/648 bytes for SCSI command 0xc8-- guessing data in; [ 2590.720615] program syz-executor.1 not setting count and/or reply_len properly 12:50:19 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf6ffffff, 0x0) 12:50:19 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000140), 0x3, 0x10002) dup2(0xffffffffffffffff, r0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r1 = gettid() mount(&(0x7f0000000200)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='zonefs\x00', 0x1000080, 0x0) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) capset(&(0x7f0000000180)={0x20080522, r1}, &(0x7f00000001c0)={0x8, 0x2, 0x2, 0x0, 0x40, 0x10001}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=""/6, 0x6) 12:50:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:50:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:20 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf9fdffff, 0x0) 12:50:20 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:50:31 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:31 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:50:31 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:50:31 executing program 2: fcntl$getflags(0xffffffffffffffff, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffe, 0x10000}) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file1\x00'}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:50:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x18000) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:50:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xfffff000, 0x0) 12:50:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:31 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xfffffdf9, 0x0) [ 2602.750009] Invalid option length (1047482) for dns_resolver key 12:50:44 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f0300"], 0x2b6) 12:50:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:44 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xffffff8c, 0x0) 12:50:44 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x6, 0x240002) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, @out_args}, './file0/file0\x00'}) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)={0x2000, 0x0, 0x11}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = dup2(r3, r5) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 12:50:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:50:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b01"], 0x2b6) 12:50:44 executing program 2: capset(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000140)={0x10000, 0x0, 0x0, 0x6, 0x20}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x414c00, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) mount(&(0x7f00000001c0)=@md0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='btrfs\x00', 0x89, &(0x7f0000000280)='*]\x00') ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000180)={0x80000001, 0x1e, 0x5, 0x326, 0x200, 0x3}) capset(&(0x7f0000000040)={0x20071026, 0xffffffffffffffff}, &(0x7f00000000c0)={0x800, 0x6, 0x5, 0x4d1a, 0x80000001, 0x8c4}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2615.070046] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2615.070046] program syz-executor.3 not setting count and/or reply_len properly [ 2615.097243] Invalid option length (1047482) for dns_resolver key 12:50:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:50:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc03000009000000ba01000003000000"], 0x2b6) 12:50:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:50:44 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xfffffff0, 0x0) [ 2615.307280] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2615.307280] program syz-executor.1 not setting count and/or reply_len properly 12:50:44 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:50:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x729}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fc1dd764e1b2108976000b0008000000080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000000000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000080"], 0x54}}, 0x200400c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x208243, 0x0) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/27, 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)}, {&(0x7f0000000700)=""/132, 0x84}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/158, 0x9e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/154, 0x9a}], 0x8}}], 0x3, 0x2, &(0x7f0000000e80)={r3, r4+10000000}) 12:50:44 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) 12:50:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x12042) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) dup2(r1, r2) r3 = dup2(r1, r0) dup(0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:50:56 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xfffffff6, 0x0) 12:50:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:50:56 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:50:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:50:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:50:56 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x7, 0xa, &(0x7f0000000640)=[{&(0x7f0000000140)="1af06c9c28a329d393996a3ac338bb6b4db602cc8895f43ecb8a4101156803aeea670fb782cf5fdaeca73dd713449429b0e3194b2542177174a1b13f24f12ae1feb2c8aedf529079a763d2224f30974c698d608d3db7925cdddd2df9efd0558b79c40d43300055c8a42d26568f39bd1aa8be316677ebb8d3f49d55a9b22d7e1a6bc7fcc81013755aad3162612009f6557c07650d62256a23e96e7606152fec", 0x9f, 0x6}, {&(0x7f0000000200)="298d1cc886e3d5d8b25875059a03f3d6dc97aa4b2ec0d8c376458b5d72c0517cb59f320dc3954ed34c98828d87b3ded97949082a075c208e5f08f4116f14c9522d5951", 0x43, 0x1}, {&(0x7f0000000280)="f8b2b588c3", 0x5, 0x31e}, {&(0x7f00000012c0)="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", 0x1000, 0xfff}, {&(0x7f00000002c0)="a345a1b225e2f5580d4881f2d7b1d38916572f5987d4054774b33b7fa04ab969f3a1fe61e884e70b0057ac9d0668c4e61d0cea4eb62006d42f2775749652a61c34deb1a84fbd42d24da8f88d8a2fa925ca1fab5663a02b75ce51fb2b4f41d1e183b815bcae297c00938308a2e8c4fbb8994bfc5969f1e92d7ca8ea4a5ae36da5c9194dd3d4e6fcc3968c309b5a05fadd4c132189968d9176", 0x98, 0x8000}, {&(0x7f0000000380)="b1bb19678e9b7f74df56b2113048838f105d9ae74c8f9ef9fbfa1b450e9c349d869e6d9b9648f66ecec7a615a395e38b3803f510c1e031aa84ddb212d7c4e001bbcd07d3184d6a9c2f618862d88bb130523b6e51437e414a7e46c4dda09682faa3eab70533464fc0706cc35443e86a25f256c12effbbe8ae5beca4145743b5cff744dd81eb35e63f3c18f23a0f80a206c8fdefcbb523a789f2133325a7b23ccde1987ca56e222bc94cc9972fb1a7597fddb6e24b39137dc2af1da8b7edeed6fc487e0a4277f936ca9a31e2d4124cf6edcb", 0xd1, 0x2}, {&(0x7f0000000480), 0x0, 0x6}, {&(0x7f00000004c0)="3708ffa44de3b681089346d902b2e5b5fb0218ddccf94345e66b458800fe05a597a5068852ab5676b762ba1fce5fd15e23cb5f9cc41bb039ca81e00d372f15221d6bab39e3fc9c1d9a438d6aef0a4a", 0x4f, 0x5}, {&(0x7f0000000540)="96bdd53aa59fbe90af54eee9e91d9a6251fd4a5a966de905e0c7edfdca6ec715863e547eef88d086a31cea636b07cc983d012113375371dd42019e7af045c5e61b8900def8e85a2f619d768a4ee9f4b4910b3ef3a6d7d5c624e388ee0e617ee3150c266f924c3d0538190f80e7036dd6a27833d84c18a494ebe7a18752703892fc744fc112fd9d654a4a9e2090dbc5419121c544a2f4598a76042e2ca106df48bf6eea0619d22d8d7c3f97eb2cd15a5c0bd845f9e718290c26765c2156b5c554b8e5a87d08dc2ba9cf1993acab689b0fcb91eedef9cfb7a924cfc543fc6a297e2125", 0xe2, 0x1}, {&(0x7f00000022c0)="541738880ec6401c44bcd224c9d233e8af6e19c4142acc2919c6848de74d5db013425db4d7630aa62c4905d600a4b86dfb680f727faa2bd86334c94c4f64f4c0b279a81632fd6394fa1dab3101b8180a322d48fd53535c3636fd1b2f7c610d11df883de88bdc0edc8a58c8840d8bef12edd67a7f5eabd5e63b901ca6b8af99a6269e56f6e17acc4db13b87f7f524c8b6696b4bef3947ec17edf7799d29b93b17e68b8b3f58a37ee1bce4bb84664085cf6f3df5e1bedb8029407cb1e8b64c9d4046fc720a23f2152effaa02f854e1ae2f820894dbf8867e0395cb582d0cc0db48f457f49efb23e77f81317214388ed2024ff74a8ff7a1ae8d8e400b86b0bda5802118434e3ee122b4ecbff995611cad952f1f000ffd0e9e2e698ecf936c092a8220b86dbe12f8e14e31ac0c5d909a3213ab165b3b81d0a6508c988e8dd6feaa5e05a16e97c42b01a18fc5efe81aaf3553e37dd945db4dae9c5e7cfeb86931ce3a289dd881e04ff07ad0798a851e87ab3622c08bbaf66e72ccb1c4fe67439d3b4300d6bf9719c1fcd33096268990bd9061942369c5bef6000aa1302b10c77cc7e5a1ccd752bcd184ee38012fcc0e07fb3db6607cd1053ebf08e29adca3df96a22346f98bdfd6726c8c67342289be7d7180c9340ad389070721556e3d4e35591ac73e03f09849ce29f7366e1771d2a1acc3ea7baa65d68e1f5bce43446fb19dd81da1708726553833cf52d2e300e03b33aaae4eba4a2e87a1919ef2d9cbc2ef98ed2c1a4cd169591a77736375e8bd7830a0df410e228466b0c7f7afb5e888396a4ca758c2c3d6919c383e6b925e4580237a23499dd8c1434c26694253f948baf18a6b1c06e70b1c6af25931a0c88b9c197ea94262edacad790940540772d27c38bf798075621d01159f15b79bfe0cfc0b36ac10483e42449a6007f9e276ed857e42da3c3a9bc3218bfb284c622cc9e086fa13e9c92aa61808baeb5330ac2e1c19dbc5f34908ad131a4960aa1fea2fcea88ff9c079ea8aac58a81d83dada385724971e1f2aec4d5554b85ddd663273fe1083328af229e035e517efb00b412a0db9924e75bb02085570dc408ac8aab0376c485b96524601d662734b04bb994d7d7b7aa62158dd3c43b5a03ca1ea2dad701e1bf5c1f64458e85caf42cb9082a898c124f8d3e00a466ce632f969c3ed775b3bb943f1e8b965851e2a7949f1421beb0044926798dcbae3f838e662d7b516f54f20a96c2b03f6aa4ad38028c50dd2b51f3936170174e58dfbabb54db2970c058fe4d6d4bbf633c451a237a44472fdb75a11d81aa80d6a43e62a25f6e1fd2622d962c0b38215e971beea772705cb5e981aaf98ec6aa97a9693d83475d94f33d9533b9b51ad40761fdfcc0e5f1263886a12a965b85892ac877f893e440c6b98c9b9b8ba88e5e8e34e60f6e889ed2eae3be4b14f0addaefb64241e181e7d1948264b6ff3cb46c140c85e52761c2da740525ab241e67528b86e62caa76e8e7917befe44aeb1f5e2e444650a0f79f02087c7385d1ee5593f1382e0931d593d6223545caba0a238b79966c8b4753dd9748a5078dc29cb173df2985470fd5c4ad27d4f95af924cb1c6635b75972bbf2e99a4aee27c3bf63d955d1021bd37f61082860256ff7b453985db9555f35a6b363ad07651363c98989287cffc8f0dca0389f220317d5b76f36951b66a506c79ef2ab717ac447ec79b8e325364171c18ef90687816c4f1fad91757f39fd32d3be7abcb6b99ccbb11b3cb418cbef584aa5d1e5f93a1bfbaaef79ad746e7878220bbfaf0160b93f5f523a80a6f4988434ab6b70e3535f79a183583c7031f0f7248caab36610111623cd3f3d45b12befc96075d76e9e25473bad100d511167f4d8249c6d13b551d64d99d433839fcc3e775ac631f984a6be7110f3975f999cf44289a6770dce6ab215ca5410d0942083e3de889acf698d4737b111913540ba075b9f69750f9c93cd1eb2aee0919fcb13815eddb0ac2cad83e313b967ebac06489c778b91b47274ed25c5080f1c1c74e5c1d58ad960c3095282452fd17a5fa76d8ff0c1f75f365c3e4f352ad4d49ef51b2432e051f063756b0aaca92387c27e440e125c14688b14ddbf26fbfa4539f5520dfd2f4b15b4f6fa17707e78f922ef69ac81c5bd6b9a579d962bb61debe700d7d641de11dca78cc47770b0d1ac859c0b04916144f28e4cde305c2af1a5adc54854b97fe84899d9d62107d4a13b428211e0ff98fc78993470dcb4d7d88549a54c45aeee1908af410a549c281919830e54cd5a35a9e03499975c4c00b9e9917b1eec142e38dbb4cd976681de60a6b5bb9256ce529dc07a8d9bbe9a4ca87751eb30f03320d554e3d78edc6cd0f326f230c2a283675a24220e9be97704e195e4eddbdc62a9b0d77f3c8f10b14eae7b9763c8b3692e2fd0ee959613f6244956c16f8d223d18a6e0aa3f71096b9b509c2e01b10e0ddd2b40283724dee4028a35a3a5eda5164abc49c872d9315784a54f946f9c1561aa36b03928c073a0a8fb78b213bc09e520e7c073700f0cdcb0d18490edd866d8ed4f9ca0ef793e2063d607ee075d89fd97f8c66edd6c8bc1c19a3ba2e098f6df763691e5659ae16dbbed6d2aaaccb7b2d582368484df6046625c470dc1d757f55dff79b1ee906c9f2cdf0da217330028cb190d4fae4b2aa48870fbea88afab86c78458eccae16495bf2421d2a584f2cc95c12be5b1b948cea7adb9ef56c3658ca0449ab6ca2528b0a05492f320b81d68b550dedad07facdd1e548b22d9206582d9a78f3221425974d21f32ac2b57a74bf3ed995e35dd573597599a10d8cb1c8ba2183384774e33a85c3ce06731831febce8957edac1a48885bee363bec326520a80f2eceb5a89e4966a0c1c48a3161904b0b09b99bab15a372235b101fa3acdbdc702e1ca1cf3427b1956089ac120b573addb3121bfa25e753eba88632157fd611f073eb3c8c9377bc16c42104fe96262a8beb98df7d0b5fd6a5004c94475e8d70312c8e222afb26644e3347d5981936172a97068656111d60d95499bd1bc4617dcda75a1ddea745a62e2eb122ed592b6f101e32c2fbf93936fa66a3e486749bc91e5a50668e7e20a72cf76f2bac724395a8e3dbc11ec150d9b9d79147ee125312a59578623cbbad9707f60641b53483cbb56c4cc987c427d588d4fe4e8225f9d9c45826f9e467a3de0ebb8541c90e3d61070c1b1353bb04ab832f2129d4167745e2bb568985915d79e1c31407c8a50ee17f7e6b4dd669ece7d238259d4d9a9fc01bf9af5fafa139ecd8e4ca9d41d0c572cd2a5d9dab3adf884db3623aba1fe8827b05fa46eaee2861898f4e73e72bca925bc8f6b47dd4182d0bbb23bd1a50306cdac51469531da45b4f6724089e2c8f7530b4ac9d2ef7bbf7f8df21104c610685a3cb868fb48674e378c76bf747196c5a342c84c6a9a078dfe1d11f5a19ccdf5200f583cda459b51694150170ac495a2e0f92ef3fc6d4d07cee2ab9368391c0331f6ad26c2dadfe2fd76bfed44816ed7c2fe533b39cd1342e82e28ea5ed4bfc1824a2373e2e2d834bf75b7a83414ecbbaf5aa19e042a30f4197ee1258b755ae71fbbdc6304c045b693e865fe9474cdbd814cd9bd62662afa1f514ac346d5b7eb660b1afbd974b3bfc1a8e637d34898e7d597a2f7cb6d5388386e9cd85a9dd82dda651919bc153871c78b4e4f54a95ee61ea68a2048f633a1697b57b70d917d3c9b11a8e9f52b73ab8fec035552eaa9b4b769450bf7ef69fd7a65f86d7b57a090f934d566bc156a94158828b332b939bd438c5d770a59bda508bff0971772d2b6cde2f69015a216c8f9402e60de04fe76b4da9c4f0d904205a26e0a958df29b99b4a9dc50a2afd392eb03600415fb9a8eaca25e1388d3b1ec78471290aa8b984ab237a03126ad287625d34056c0f18bb0c365765232757548db2ab400107dd17da155610985e635a3c38f719becb0afb5765d77ee5019cde1540cfce4e0baa6f716d9d3fc881d3f9b797fb566168f1173412ad8b3771cf10b4c118cce5933e5342d5806403e45ab3474f0c3b9683e73e99e9b164e546d5ff1a4ba9eec90bc1dbc12d30e23795dcdd2bd9bbcd3415e7f943482c6864f93faf1cf1145d72efbe7ab73515e40060a8e368cc60fcd8b87aecc629e0eb0196a0def704cabd3553142616ea230cb25ede0d53efca62e09d41bf7735c4e3d6e5725e684ac7cff06e20acb2205203281e8d5f6fc14af947856e9efa4fe72ae3f1e6e5320de1565cb2563f5cb640a5a5bef21e879ee07860140513c8c7a840acb2d3a269436c9e2f28de7acbf1ba15197cdc7df8a2c41bec4a51fb177cf485e76d3ee04866e23d9d509b3e0ab23843ac92ffccb5713f941664e9268f66a150cca9c6027c9a269143ad65093bd649dba955051b18004b9c0e345ef958fcef60b6b6f3ac4b255154f2ec32693a47aff1a0f9a23f2d909b932605d799f09eb90718aa458ed23085e03a8f949e6a04f7d9ffa0253bc99b6491920c7e3bc42164829ad5993c6a5289f6a6a63b488327cb7cac652dbd57abe9b007db3176008f8c379c2598e4a5196b4b4c08611b7091b454369e102b4d38801cfeab097c23468111821ebe5505cf5822aeb18e6e3237a652fc3aab384db4891481f05e3a78229dc15b419952aa769851ff9d4f71e1f820b99ade1f63467c297a7e7f1049b875c6baee1d9d3694e94c1cfb1603fd45a5320eb0d4a65da08e77338d5709860820a370c0d7a1c75126aa4a4cdff9944a0969b3bb9f21386fb0af82906c68613f834b6d0300b992cdb3504c93eb4c390eaf1d87cf2a112fe5324f102ffdd789df01c694f34dd7b77ffd6ed99ed07559078dce7198fc93fd26cd96e7592ba6d8b107803f5bcec0ea0cd2684a34c05fc11144957876f598d08b769e208a9de4c522448ca0c3726437f8f18aa2cbd9a702933171c3dd7902b4ce50d69f6123f1b4639cfa195d763d3d2c5186030cbd15b0b1393a81723b02271176cc20db199e54981312b7e99d19923d0871be7796167514ab3f4020294efd4274e988ff314cb6a7a6dc079f0d2c87ae0e3c29d8af2bc26a1a88eed96b7d0d07efd293a259b4fe4d3cd0260097b9e86b91d4c3e5e396563c58d6493fb2f6295641af1a6e41e3b25bf24a16668f419a8bdc4edebb7ed72462e9a854d9df8ea23591df3c96f5e663a60334f4e4fe1a5996d76fec60bb2be23c17456327e31a8d28af91854e87f6f4bfa8de8b1b6eff10974d6eea94be34e2af0ae3399460d9e8fa487e767e93c9a8cdf0b54c2f6aa1d405dcdb810cbcf72f1cd2463daa65a191d88484b0b8a373a7915c488a6e1307d4f55441012ef5c26bc96b66f9c982b206d880e3280f8af8e9e215cbd5671b677c799b7d62d71662217c539fcf2d175a614e16c88989a91c16f4a0e2cb75c91df406adb02581604cbd585c0b02a5bf3869b02e2b2ac4d21b4f18eb2c0b0d87b082cc5012714520b7e735f38fcc60abdff79ce4b656b4441e1e88ca2a218ac915a09ffea39ea7adb3d5aa8cabe4e485e28806a546cd4dcbb88faa29a486727716139b71aeda52aaf32c18e801e5c99b5bbae80e0afd336a413412ef88164ac9ba7bb3d2e9de65381c410e195c9a1a4ca75ed136dfff470d2f6475fa67e64a4df3a79c4a851251caccd857db787466309a871644fd0b7ee436c620e367498b721d119f476e23812dfc7b355fcde17702102ea28c3baa3cc5ce8363499ab2b89a6cbed930db27f85f5c0a3e778e32caf", 0x1000, 0x9}], 0x2000000, &(0x7f0000000740)={[{'//+:'}], [{@appraise_type}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@subj_type={'subj_type', 0x3d, '#\'+-^(:#'}}, {@appraise_type}]}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:50:56 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xedc000000000, 0x0) 12:50:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) [ 2626.941865] Invalid option length (1047482) for dns_resolver key [ 2626.973619] loop2: detected capacity change from 0 to 128 12:50:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) 12:50:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2287, 0x0) 12:50:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:50:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x88800, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x4000) sendfile(r2, 0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x2) r3 = dup2(r1, r0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, r4, 0x29af8000) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) [ 2627.054231] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2627.054231] program syz-executor.3 not setting count and/or reply_len properly 12:50:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:51:13 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000200)={0x4870, 0x80000000, 0x8, 0x3d, 0x7, 0x4}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='dax\x00', 0x300000, &(0x7f0000000180)='\x00') 12:51:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffc, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) r4 = dup2(r3, r0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:51:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:51:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017c"], 0x2b6) 12:51:13 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x8000000000000, 0x0) 12:51:13 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2284, 0x0) 12:51:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf0ffffffffffff, 0x0) 12:51:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc0300000900"], 0x2b6) 12:51:13 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) [ 2644.534453] Invalid option length (1047482) for dns_resolver key [ 2644.547856] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2644.547856] program syz-executor.1 not setting count and/or reply_len properly 12:51:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x100000000000000, 0x0) 12:51:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:51:26 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 12:51:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:51:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x200000000000000, 0x0) 12:51:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:26 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x300000000000000, 0x0) [ 2657.183757] Invalid option length (1047482) for dns_resolver key 12:51:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x600000000000000, 0x0) 12:51:26 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:26 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x418000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = inotify_init1(0x80000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = syz_io_uring_setup(0x2dd5, &(0x7f0000000200)={0x0, 0xae71, 0x2, 0x2, 0x3af}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000280), &(0x7f0000001300)) r10 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB="2c7766646e7c3df5004e99a5df010680", @ANYRESHEX=r12, @ANYBLOB=',\x00']) io_submit(0x0, 0x6, &(0x7f0000001680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0xfff, 0xffffffffffffffff, &(0x7f0000000040)="6dc3e24a2fc6804cb57320b398e852255afd1490e8a374605784627e71e5b64ee5af2965c9fb032e2368db4e2104b6523d8e38432fb1b5818d101b4223227ef46c21414d9c92edc363e9fc28a09663483778f3e94737624951badcb06f26bc2f99666e996fd00dee022821cee3c9025802a4eaeefa7c126dff67ac22159e1b207b531af128bd9d7b62d55f3a3d7306e3c51148ce27d7337494499fa1f72fe36d236aa976bd4c4f1119c71780", 0xac, 0x1, 0x0, 0x3, r4}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0x6, r5, &(0x7f0000000140), 0x0, 0x2, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x7, r6, &(0x7f0000000300)="b03d2dc3a6d7838cca394f3421977b136971cb7e0952f917e5e4e9e5cc0f6c017ffaa7f7de4444c3e34f5ffdceae50e35c8f3059157bdb481877edd45581ce8645532940ef588f3be03412d1948ec95cf57f72bef262cd8aab1cbd4d10a79ccd90aac2f552571559e24967f6ead62fc14920b32b50d50d1cc89918f213fbb5e652e1641cae5ccaa1769cc616ded8db9253c33b40e7135d90f9a9f6809800a26e66bba7df80ed398b22cdf08fa4102a3ad50683bf2a224c2f34df919b267d2848d2028a9226f2c483553637a26ef17454911525e462e7df001542f92e8c7d8b3a2fd9d79fee73034b51aedce6b95ea81915631e349ee263e4f172c62b5004ca1e8c1f2ce0ab83f6fcf77c85bc2487b1c5869ab1958f61c8c2108821450edf5f6807f5ebd08203f10c4837a8802eac0730bdba0e41b95bde66da7f631314f8060258398a22258713d785b129ec1b0cbcec9debad178be912b0928db835cbc0b23f0802f06ed76eca329713d6b664034b6fc777369b7421968d7fed23a417312fd4eba566af6aa762973c6495149bf663ca9dc9d201164ff751094799cb641d42cd2787c6432e18d962199178fdea30ac0ade995c1eb9e17c9a170e3936e6c8619cd326c9336def2d95de3fb0ef079fdc09cc2a83c899d1cec3320eb89717223b7b98fe48cf0a4dd2907286012d23e9e0d66c0bcadc25b2df2125037f36ada5fb9097557a7a1ae840e03d5e6d2acd032f2c8c8c78c13f6be1d60a7d64bbf80f5cb8ff87c6f7c2c5ee4d692a27207c857cbd5425095daa110795a92c9494ddf1200749cbe389d6a0e823603ab5d54b157ce56297e2873926c761632f748a1ceb586d29caaf53ef0e75dde9e1c2dacd47d41cb1d381fac1d086b01680f9a2c6d004cb696e6f14e0b8e57adcdeeaf15367158b631bff7b2a46ef7a0f2a38ea95697ca81dc60ac25aa68ad7851c182d592e7a384c9a46b9a5fca3847ed7de88a487fd3cb5a18fae76ce3a5ee47e05230c1589abbd87521a087b0cf62ef632c4eabc852feb304632246473445ff8259670f2b48e3fd43f2fe267decc3a69079a2dc657469114ea4aca5f3e02ee15932346d8e0d0961b15a49d661775c0cefa93a7f64c012e161e9fb404ef360d4220d2ac6d63eecd246c28dfa2c5038f6258b39d08c0ab972cc5f8d1ad5c584486134ef3860a356b67ff816b3985d995266506da153408058e778d0b2f23bfdee8ec9811ceb1df08da603eb5b7d186650b27d1b92cafdc129da403fdb3dccfe7bf00284fcd01c28578af2970bf1fbff93ff1ffea5a6a6dc5ee3e24023e1e742b381754f652561994cbde95ab6c561d653d51e4ee0c6d823b3d091d27702f3a98558d438cf0f6c4b4eb3d03d00c5bba4c07231c553ce974512337bdc16a12495ac40acdba4e8723f8be325c811bb57c8bf8c48ab4b2bfdc1505186e48bccaf75db366f1cbdad036dfee33a42c46fa5510274c79eca874b4f75f4f8394cbfcf6b571be02338400182bb1dfb77082c72145c5d937f5e7e9fced16f37676b233388a91907c9d7ede2db76108ebaab1ce825cc3bcc0f4ee16a28be5e2196aac1ac3380350330a0942c0947d4fb7f9ec062e3c42a4e5a86e86b067ced22204a3053bb18d2ca45736ea03021bfa4e15044886fc7b54de196fd54a8d690286ca58e27ff9af143d15673fcc05a775774aca9f81a49fc233404fbf7fe4431ecda4214a40fe27171e2bc2281e56bd37caeeae2046ba91f8541391bc603324ff1dbbb586379837f976836bc74d90509f6103b1e5227493ae9f3737f6a5e903808c030bf33a98a4261eb82eeb0c765bbebe6aeb4148ce3c3c0b79c91786d76f9da97266a5ded4164b598f7654323c4a7a57fea1c12aece735a9beb9b3eb4972e4031be3c7271a6a5b4929a97628d12c45d6de557e6da1912cbd43f5c47041a2acd34ae9b3bd98efe70398d5bfadbda18a80808122db923297f82a560b70d7b31d03bbe82313705d1551530b5c54d5d3f6b2c5caa7959d0940c9ad17e18130c813cbfb715d8d0c0fca476423a540b28dea6dc04f3178a55fb5ef53496f455a7c3481a66e897d699138d402f12ec75a4481d48576a7b04b26f9d14ada9f3abbfac0347dcb7e0706bbba4721155441d9e34d70dcdb7480778a36e4d0edd88d3bce75a1a02126115a8be8a5f18e518b70c8992cf959285878e989152a25b027497f79e62e9a26d99e5c7fc8fc708ecb7114726db5cd21f1e6f732a09579eba65673073bc211ea1ceff7b5f0f746dcaca97bcf651fd0605320def410fce9868b2ee99a8e93a84cdc210883f798142ba45f7546d91a453ec4e5e469d4ac0d89b70d0c241e4b7c77d74c5034ca7c2a6e3722b66b8e86820968d94a940a393c084a6ac9496d65f90231262e86dd478b4499e339b3be7cc9f3b951c9cfbe367bc5302594a7541adb126a7bf693c0f8950a04c3aa342d6eac9cc6c00e76e04288a295952d6786778bb1583e77ca500735dea156b648d539c6517a835a9ad3b6f65fe2aadb6917c8be5b6e2f8cc74b4b10b9de34b146c06c3fa2cab11dbf28f4b10e35ce8f963e4d449927808f08b5d8524406e4814a67954ee0e06b96b0935ab8d1c1ef71322e223c05b928e06eb60b5dc77bf6f5d50aeda7335fb09d97ed27eeebc6af2a08d271120bf8f746fcac3ee8f5fce7eca80479d4f11b195d13fdc1af9a0313fc1eb840bf2412da303ef84a003fc501876423bf0da764be81faf3843015b7a906ba86714daa23d33594beb4af64d976b0a027c2e466a4c353ebcad20cfc863c900cfea730868ba938cd6893f52883d2af1427d63cb6a49c13eebd160406e1b8e0adef1591c00d23d55fc9ec9fdc77698cdf2c501f204f627e417867e9b70f696a82434797535e894da2fff75c36116f95492a66fa3701cee57b1b95bb55145a6933ec2ef5bd0c5be9f1c11a2378687950631bb4f5f5e54e79615390778d0000a5b5c7321356e79c25ddd2a9aefaaaa43ce20e0a97bc7c445fc53fa3e4ea034a6c96752c13b98eea9843897b78795c8e4956012b9a6b83e2815b27d2ee103f7c60d3d69f9fad8f789925106d4f7b0c178569d48661b10a0a0dd1d37235a6953908c32734aa29965c7371f23a60dcbf33786cda57d2a0ca02c74591a83a3a92c3103e33d00fc087ac474b84defeb05bfc82692743e6f56c70120d79751dad3690f6ce60a44e1302f5d1de6be7853b2998236e34721ffa9a58b8df9805f4e94741b3f944255351477de95c8903ac839a481d29ff0d3b50a428590cd87abc8d5ca617ea63057964b3f761a574b19fc018be8f97a199cbbc7d1ad2ca344abcb90d96e1d6dba6664e335c19c969886e18e3b6487bef8d848ed94236f994c80890a4850e53aacd6505eb080bab10505dc21eb5902c03b5cfdd6aabaac1373a89ae48eb2487a346c5c2eb13ea36337917f5f4c0c6c869257f801925282c7fc83e116b7e49b48c118b1adaeb79c3dd3039b19d8a0e13b0ce6709da34f46098e025268ce93b4added62ca9810ff74837a9d37227f6c15b807c12ad9e4c0440c337901c3571a3ba9e668f9cf9cae0b5779b5e3afbdf5198e6d4bb3d283efc5629bfd3de53053aae0811c42cdcfec7793476ace5ff7e1dbbc298cf7149a69b32f950033bf2b551bd12f94c7faddf5c29fcea3405f0bbb3ec1a0bc1e01c6e51ebb78b88078f96c7eac335ad9df537a9cb6d327342299760e26fac7b6b0b19e9131523f7d824d398cc286e1e31826e435f0f0ff1aff3ace38baa50466d3d1842740cca5711d88e87d5af873db39549c6bdc5bb2f228984f403c993baa1064743dc6ab0618f599768efb7c7b661d3e03fad52dc2e8b5a86058be23cd075e3ab0b867c21b3dfc0921833fc387f6f472777ddb115a81b4d5403d767858e6ac196c2647728addb3835342b457b550a2730ad0b15baf851949c1efc20a987204dd6d827e8c204b1cb8801c4e3897e10f45f5e2ffc277bd705e9d2d01b221e64595147e1fcd82fd92703614abcbe914a45be5ed922e465b2f42957c5fb72400370cea6e37bd7cd9d055d91be20fb3bf13d3a4510641b4e1199b67a0f0cc2df431983212a1abbd6e75d593bb34794c0e339a0e2895ded5dac69f773899fdd7860b7133bdb0ac7e5bc11624323e3309b75d3576f8d8df8cbe2fac1f8a1726b5f0f60c1ed0b69815c088096e2ae6a2e76e07292eddc535c4eace3e14661c800b54a8543798c3debd676ec4fc0b252329b9106ae5c109c4843af28c3524390fa1f2a19e34afb865bfa26dd95ce4833b3a43f99750a09f5f677e9d7a4bbc6834d8ce76cb9f8a99f06d1a0463fe4e004d25735d7da04bb3b73ebdd52acb30ebb642711603a68ec225e804a7aca97b1a647dbaf6440a98f8bd04a57cfe85ee1c6cf6c3f965a0f2210b2f09b34a7e3f62c7b1f49ce61842e8eca02b97c56f67892ec28542039806ec047e9a126c4548210c0ffbc31e0fc55a0c7a1c6657b04fe4c17160a99d4e3ebd951295051bbb48682ec4d1630133d38b53eddd667c55e6d2fb510b7e43543271916005b79b2bccbd71ff944370a8d5a4ddcd3859fe179525ae589820a6bb603005b3463807cbd7ecfd63237b8d892789c2f9bda13cfdb6b02a8afd8a9492268dae35a2c2db0a901daceadb463e0a100a6b57e83bbc19987dbee64aa86ed4174ba6775c1813084739e39bf50c7ac675b75bd823c265bcbc72ce5584ad0d36070dcef53ac7f7ae0bf472ac37e48d81829f1da79ddae7e91ff3734a29d3636a510a829ab828d0413946d1bc99360436514ed09149537539404afb3ab5d10a6996cf0837bde317e1bda02010d2cb38e598c963c1eef8af9a47fa43f35491d89d2f93dc090d8c9d6c5b1acdd516bc8f8be06c03f041d79a971bff8c2efcde4e6f6b90072dbd33409838f586ba65de22945a73257279a01f3b1b98eb66312d76834a81614c430dedb94b0f71bd8c322ece503e06df79e6af4065d5c4836f95af4a3ad4071dbbd4c66f3ceabae2e732008d6b051a6d654fe16521b7d29de1e7650fc0a9202bdff1a9e7003b642cee74d74b9a4c0f90469b2d7a24c74438444a4412895475c246e7be70e1e09b8766ef93ce3fcb9209e7c7fd1ce71a95654dd5183c3ae75fbf147636cb6d5b2db744c124030ab171013832748ca96d1f9f3364d68ecf41bbeb95ac51c33a8e6f6e973372561c4e0dc60de8ae48cc74e39126d671c6a8bdb168689ba12ab5ac77fdea989b7095ec9882860b128b88c81191cf7b5c81adeb9c0da48c56d9fae2b181cbe3f79057583132c483a3a82267b80bfd697729805ff1c085e6e6675d28a7e72a503d3cdd56fc7eb29abe3c9d0c81d26629806d8ce5509be495a1f7a8939a96e770c882d68ec2e484382aac41373cc5602b8633fefc661f25017aad2393b667e152903ab39e765885dd093f0cae94fc4c942f377c9f0055c84e660567212b68b4d1d36c9b4c4e336483e475210c6a9912fb81b95cee0134cbc2d18e3a940571ab8ce02847a53e48fad090cf482c42785fb2953b4eb028ce1a4c3bbbc68d0914acad2b4c452a1adeadfb680e3508e3f41ca5697963eb43478e0596ba3d3f201a75b357f366c5644f424f85c11d28f7a1d14d02ed7b188650aa564d4cd25a84aac8d3b1aecf7d7de56119c69623f51c6653d64c8d5f6090ee16dc65604942778bd7354e0ff2e420e0b834802e62a01bfb7802ed6ccfba60090b4f061a576be2978ff6b561da8fd592737f2cbcf735c1977535e03412debb7f18c5", 0x1000, 0x7, 0x0, 0x0, r7}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7, 0x6, r9, &(0x7f0000001340)="a4288f5d4862bd2c22fb28f8f66a780bff55937d99047eebe333b5fe1dced1ad05bb0ba8449df64ad7e649bdd6d0c299b56cda6aa3bec2909b3fa91eeacfff75d3efde5526aeca6b9165ca3927907e31fb9e9c12fca5d341ad6baea6b33c905e364adf7570e3790c21bae8f1104eb7af5e6fb3d0ff75a44b49317e5ade060165f0be07bff89f9a", 0x87, 0x400, 0x0, 0x1, r10}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f0000001440)="ea51cbc8cdd565d89015f776312c12fe86090edbdac0f2aa497d58b5b6876bb40beafd88113db8821b3ef4f0cc6fe2c9bc26558bf139d78a90d0271ed5236897950bd163076cd948f98b666a8a16c7b9eea327901f6b2457c872011bc81f7b5a46a0add459cdc53feb24c9c5b3335fe1ef8deb49e9682cba7e4a6828ff7bc19662673dc868c353e0b34ee2b460930ca9d8ddf611f010be703be65e2ba1734dfdfd5fa6bee2305bc6", 0xa8, 0x302c, 0x0, 0x3, r11}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x6, 0x60c0, r1, &(0x7f0000001540)="b59f80a07cffc5ff164a825d029627898ebaf35bdd5a3f543b6c7b088c12da0b2e1302ac615e7b27741b3e3201cccb3816a666cdf9c5626e0b72aa35af1723e77f8be3411886a44f47c3c1cbf0161087cfabee3b08ab51a8b985ccc5efc9572b2238238282541dbd228b781956df0366bb1226006d2e6099006cd2311779a9b5347b7f67c8e2fa7706d0e6cb383f094f233a9bfb46d4cdf5ebafa1b46e84b0a78a4ad57bd68f4d0b35c21324a5f12e8f042887aee2d4e6adc6c438b99e6446955e2cb6771d82b6fc3327a5f8d85935a7", 0xd0, 0xa1, 0x0, 0x2}]) r13 = dup2(r1, r2) ioctl$SG_GET_TIMEOUT(r13, 0x2202, 0x0) fallocate(r13, 0x8, 0x31, 0x6) 12:51:26 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)={0x10000, 0x0, 0x401, 0x7, 0x6, 0x7}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0xffff, 0x3, 0x3, 0x9, 0x8, 0x2}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:51:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2000000000000000, 0x0) 12:51:26 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x2010000000000000, 0x0) [ 2657.539013] Invalid option length (1047482) for dns_resolver key 12:51:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:39 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2284, 0x0) 12:51:39 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3f00000000000000, 0x0) 12:51:39 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f00000000c0), 0x706e, 0x285203) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000140)={0x19980330, r0}, &(0x7f0000000180)={0x4, 0x1, 0xa98, 0x5, 0x0, 0x8}) r4 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) mknodat$loop(r4, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:51:39 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc"], 0x2b6) 12:51:39 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) sendmsg$NL80211_CMD_SET_WDS_PEER(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000040)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@local}}, &(0x7f0000000140)=0xe8) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:51:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) [ 2670.030146] Invalid option length (1047482) for dns_resolver key [ 2670.082875] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2670.082875] program syz-executor.1 not setting count and/or reply_len properly [ 2670.111266] Invalid option length (1047482) for dns_resolver key 12:51:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) 12:51:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:39 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4000000000000000, 0x0) 12:51:39 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x406102, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x1, 0x1, &(0x7f0000000340)=[{&(0x7f0000000280)="ba9607725d5dd9bd3d6a070caa324f65be246bdc7162035e00929d36f3e740410d237ec088e73b699baecac88f0c0282471acb1fb5681b6487bcfc385951ae5b5f012a2c60ae6e0500a0fd4d0c0d205763bc891d177cce14ee73b3ef01a90f3162c908f22ef85a823df0bfc2df3f7e433c0c4888f23ed9fff0343b13a1a38e74e6a7133b55ce3a167b625cbca49844afd5a6a992", 0x94, 0x2}], 0x10808, &(0x7f0000000380)={[{@dax}, {@abort}], [{@dont_appraise}, {@obj_type}, {@smackfshat={'smackfshat', 0x3d, ']-'}}, {@fsmagic}]}) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000180)='[,B/\x00', &(0x7f00000001c0)='./file0\x00', r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x35d, 0x80000, 0x6a, 0x80000000, 0xffffffff, 0x7}) 12:51:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:39 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2284, 0x0) 12:51:39 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) sendmsg$unix(r2, &(0x7f0000001740)={&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f00000000c0)="fcddcbeee7b3ec9d276c3d9dcf39abffcdf0e1f999a9cf4af20437531016c83e58a988d0fcb2956f8764a2e4b6d60f74c43b967da29f9b22b61fb017ff71892a0ad13ae1c72f7642d271762b6a9a9cd1dfae213aa940c2807b447b4ead2373cf952ba72b51496a56d35b4b18eca6002acbb282d88b351ebfe5a45477c86d2e1b565142c9d30a", 0x86}, {&(0x7f0000000180)="23e74660364cf51220612570c5f395fb79f63c6916ae62c29affe0442b7949440c5d35b22bb00ba36f512fb24ebae49dad4c0f4436e7f9b039d19b78cf3df1185946df3dcaa9c56de121b358faeb04b5dafb5d74ca75782c251978cefc595e09887b73fa4cfa8afc9e7e51d5b1c9348a01a093f9bc6bb32c39b67e098e15", 0x7e}, {&(0x7f0000000300)="65d0814daa49e82937ebd99e9c7e5f80adb8617b35cb7bf6ca7534c06c8f84a1c099c57f56c354ee173c52a33121ba66a351a989779fea59a1cc1352d02bbff3906d6de6be07af702ee6419fc98b2236c5f2d4533c219150e0f0b588dd78935655f502c573043593795adaa5e59f711d4322c3704b4b27d299b9f541f2401e0dc5f41900a315f0eb8679032a286907b86abd819d860dd21098c11e0c0593f09284e3661a91cf48f0d6e7ee1c256716249d6ecc151e4ac2d73aa7217713c6b06bbb01f2", 0xc3}, {&(0x7f0000000200)="952cc643128739ff033eab57c6cb90e5c46c0461f45d760d9747f57d0e2729a0a96889258e2c38bda9e3de1f87b65f41c4e69f23460a13c9af9c", 0x3a}, {&(0x7f0000000400)="ed97ce3c760174a0742db70810b8f1164a832e34dce1857abad1e9738768e3c97da7b0e9c1d2a889fe05b201ac7744847620b04ef1871f0a608158c102278d57574ea31618350aaeb0b3838bd2210d7b616cbbe47a5e15992d3cf0f760d3952c80520912724a799985d2cf7dcaaa650bcb04ccadbe63750d70146d041301faf9d2e50f86bd4f3b5990", 0x89}, {&(0x7f0000000240)="ce24c566a32bade72acd4da8796cfbdb7de4d5581d6e66bbf34a4201e08c80d76ce03207d9ea27fbf01b27315973f8c3613d8a15cd3feafc44b0c6dd3f37f86b04e3846e21c2fa8bd8f5994e69a3b823ea850b8e13c0a20625927427e8f272", 0x5f}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="6d7031b0a9354051c322600edc2fe8d676073cbb3b2161fbd94e483542a437e66186b326ca18dad80b97a23e466c8e399979fa6fc8d8481b8998179ff54712232aef02f708e7d818dfa1d88aeb338e58cb625de19e1240", 0x57}, {&(0x7f0000001540)="a2bdac75c0443c61915094750b8847d9c70a1158a02fb5e566768f863c72b7ad4d714f3fd60b3fd764c533c3d895eb72eb8f1dac4d2116e0205f30ee0fff37d2c6dd4ab8ca6f02e27bf542", 0x4b}, {&(0x7f00000015c0)="e02a74df425bfb552a878a3f7edf93f8b863c0e1ddef03ae0f168ac280e1a0f476abf8f8621b33be40116dcf5580b09d1a5c9130bff097a5ff81a49eb8615db7e5be67f1c4e6446c748ba4ce0f6941ea51b504c1370625af80c57ad5ea120d2ff1f47bcd8e310c626be95c4a647d94c8e38cb89b104a0fa8909d4dc66ba23b27351986b276b7411f41d64cc52f615d3a40ba6a76514439fe7d0e52c0804cb59902cb47ae16", 0xa5}], 0xa, 0x0, 0x0, 0x1}, 0x10000) 12:51:39 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x729}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fc1dd764e1b2108976000b0008000000080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000000000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000080"], 0x54}}, 0x200400c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x208243, 0x0) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/27, 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)}, {&(0x7f0000000700)=""/132, 0x84}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/158, 0x9e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/154, 0x9a}], 0x8}}], 0x3, 0x2, &(0x7f0000000e80)={r3, r4+10000000}) 12:51:39 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4e00000000000000, 0x0) 12:51:39 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r1, 0x2287, 0x0) 12:51:39 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x400, 0xfffffffd}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x1204040, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r2, 0x12) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x400, 0x101, 0x800, 0x3ff, 0x3, 0x5}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) capset(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000200)={0x0, 0x4, 0x1, 0x2, 0x0, 0x3}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)=',\x00', &(0x7f0000000180)='/dev/ptmx\x00', 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:51:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:39 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2670.556914] Invalid option length (1047482) for dns_resolver key 12:51:53 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x4e00000000000000, 0x0) 12:51:53 executing program 6: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x4000, 0xd4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x64, [0xb6, 0x1, 0x0, 0x4, 0x0, 0x1776]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) readahead(r5, 0x100000000, 0x0) 12:51:53 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:51:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r1, 0x729}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022dbd7000fc1dd764e1b2108976000b0008000000080001000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060003000000000000000c000600020000000200000008000300", @ANYRES32=0x0, @ANYBLOB="08000b0001000080"], 0x54}}, 0x200400c0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x208243, 0x0) clock_gettime(0x0, &(0x7f0000000e40)={0x0, 0x0}) recvmmsg$unix(r2, &(0x7f0000000d80)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/163, 0xa3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/31, 0x1f}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/27, 0x1b}], 0x5}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000580)=""/26, 0x1a}, {&(0x7f00000005c0)=""/116, 0x74}, {&(0x7f0000000640)=""/1, 0x1}, {&(0x7f0000000680)}, {&(0x7f0000000700)=""/132, 0x84}], 0x5, &(0x7f0000000840)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000900)=""/144, 0x90}, {&(0x7f00000009c0)=""/189, 0xbd}, {&(0x7f0000000a80)=""/126, 0x7e}, {&(0x7f0000000b00)=""/110, 0x6e}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000b80)=""/158, 0x9e}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/154, 0x9a}], 0x8}}], 0x3, 0x2, &(0x7f0000000e80)={r3, r4+10000000}) 12:51:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:51:53 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x8cffffff00000000, 0x0) 12:51:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc5"], 0x2b6) 12:51:53 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000200)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000240)={0xffffa32d, 0x7, 0x800, 0x5, 0x8, 0x20}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x400, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@caif=@util, &(0x7f00000001c0)=0x80) r1 = gettid() shutdown(r0, 0x1) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r2, 0xa, r5, 0x12) capset(&(0x7f0000000300)={0x20080522, r2}, &(0x7f0000000340)={0x3, 0x47, 0x0, 0x13, 0x6, 0x7fffffff}) capset(&(0x7f0000000280)={0x19980330, r1}, &(0x7f00000002c0)={0x9, 0xdbd4, 0x40, 0x1, 0x45af, 0xfff}) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="62030004736e20"]) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0xc4080, 0x88, 0x1b}, 0x18) [ 2684.030603] Invalid option length (1047482) for dns_resolver key 12:51:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f0300"], 0x2b6) 12:51:53 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf0ffffff00000000, 0x0) 12:51:53 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:51:53 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140), 0x0, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2684.251747] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2684.251747] program syz-executor.1 not setting count and/or reply_len properly [ 2684.300453] Invalid option length (1047482) for dns_resolver key 12:52:05 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f030000dc"], 0x2b6) 12:52:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:05 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='efs\x00', 0x2c0488, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0x40, 0x101000) linkat(r0, &(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00') 12:52:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:52:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2287, 0x0) 12:52:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf6ffffff00000000, 0x0) 12:52:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(0x0, 0x0) munlockall() munlockall() 12:52:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 2696.692435] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2696.692435] program syz-executor.7 not setting count and/or reply_len properly [ 2696.708184] Invalid option length (1047482) for dns_resolver key 12:52:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xf9fdffff00000000, 0x0) 12:52:16 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) dup2(r0, r2) 12:52:16 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(0x0, 0x0) munlockall() munlockall() 12:52:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:16 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(0x0, 0x0) munlockall() munlockall() 12:52:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x2100, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000300)={0x1000, 0x5, 0x6, "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"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000140)="36153cb6ef095b55eaa563943a131c6bb35a0b5db2de079bfe86adbef35a82c6bef35b697d4d5f9531d82d275dae2a2a4fd8e0d13b62655f02636db6b303692bf05be7fc5f17b59d987c947eee1022b162c00dc38d8f639378938b8fa7b6a1753c01a0a057e64265b1df1d3b4d766a1937dec37c1e1e45fd3f3a860b73874f09d4f9709c83981dde924fcb6895be8629735167700796c0d30a", 0x99, r3}, 0x68) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r5 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000080)={0x79, 0x1, 0xffffff80, "0b6683a1604394b6c60d485a0746259341e7fd6ddb80534cf650d2dc15daaafbc1025f3e2c3dd3a84e6a8080bcfc08a6d20778a2c14e9965fef3e5947709329fefc263a001edd348813d29d3b42c14c128088f856690a4e388aa5e61720484be4f0ee63b9beeb3fd8a4dfe00c6b2c387f539cdb6a4577108c8"}) 12:52:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x89d7, 0x1ff, 0x3fff8}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:16 executing program 3: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 2707.532103] Invalid option length (1047482) for dns_resolver key [ 2707.537034] Invalid option length (1047482) for dns_resolver key 12:52:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xffffffff00000000, 0x0) [ 2707.564855] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:52:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(0x0, 0x0) munlockall() munlockall() [ 2707.641622] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:52:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x89d7, 0x1ff, 0x3fff8}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:16 executing program 3: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:16 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(0x0, 0x0) munlockall() munlockall() 12:52:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xfffffffffffff000, 0x0) 12:52:16 executing program 2: semctl$GETNCNT(0x0, 0x3, 0xe, &(0x7f0000000180)=""/192) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) write$binfmt_aout(r1, &(0x7f0000000300)={{0x10b, 0x8d, 0x2, 0x1cb, 0xf7, 0x80000000, 0x1d3}, "92e3e4fb547bace9c1175eafc2f825c89501191c1cd7e9f4388a56ab6cee9b157ce2fd6dc52df35cef4d587373d88dfc4c4855a1cbda91ce2366e46778088bb99d85c0105994cac318c1d2160ed52e86f6bfa885173045d8f61d0ea1d5ca7ee8be0ead0f7d06f68705e6be4db42c89ae09a06bf8931007b2e139006f1c5402333fb336ff90bd339535605945eeae87d029436b5c8527507f95355e59af81606a44eb38c26f0c30e76f6023bd674bb32c39d09c2e", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0xad4) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000000)={0x0, 0x7, 0x400, 0xfffffffc, 0x10000}) r4 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x400, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) kcmp(r0, r0, 0x5, r4, 0xffffffffffffffff) 12:52:16 executing program 3: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) [ 2707.802919] Invalid option length (1047482) for dns_resolver key 12:52:17 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x1c0008, &(0x7f00000001c0)='debugfs\x00') 12:52:17 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x89d7, 0x1ff, 0x3fff8}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2707.853777] Invalid option length (1047482) for dns_resolver key [ 2707.903258] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2707.903258] program syz-executor.1 not setting count and/or reply_len properly 12:52:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:52:28 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x2, 0x6, 0x4, 0x89d7, 0x1ff, 0x3fff8}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:28 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="ed0000007109000009000000ec6ab7fe85ec648b8ad2ca2c351aab1b6767bed3e18f15d51b6b9cdf9bfbfbb27e0bade76706aeca184219d6429d1de7a1a36109fab7bc8f6372ff27010000009f7edbc29ff1062f5ac663a008a2c47b4e175c46812badbc50411c00047abd1e5e1291966d7c1aedec04364797ab3036056358186012cb95c5f510d903de85e1f8f8c52e98b05e6715a63a1559956640c210c18faf1d92436e75c1dfec320d626838a0db3d7d62dec9f1b39c837fdaae8c4d4b095c671ec022cb87cc47378683f9fcc157be6b09ffb3f13fa1d483ec3d8586057446750c40d63ab8e291684a945b4b6d2eac0a544c55b79b014e"]) r5 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 12:52:28 executing program 2: ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:52:28 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r0}}]}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r0}}, {@cache_mmap}]}}) 12:52:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:28 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r6], 0x102, 0x1) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x400, 0x2, 0x6, 0x7, 0xfffff533}) [ 2719.625687] 9pnet_fd: p9_fd_create_tcp (36543): problem connecting socket to 127.0.0.1 [ 2719.631606] 9pnet_fd: p9_fd_create_tcp (36544): problem connecting socket to 127.0.0.1 [ 2719.695019] Invalid option length (1047482) for dns_resolver key 12:52:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:40 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:52:40 executing program 2: ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f0000000040)={0x1, 0x9, 0x2}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capget(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f00000001c0)={0x4, 0x4, 0x5, 0x8000, 0x4, 0xb95}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') 12:52:40 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:40 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="c066c6f82f6e756c6c62300049a87865f498e0b030f76ba67b960c3d2eb1f99cbec10d0210f27347b2dc8e46fac5e9774f1b976c7621032ffab69007f1bacc9f68b94cf99580681011bcbab869b305599a5345e62ba97e26628fa8fd8c045757cf28637f3d9fbe6f9eb4e4471e23ddb1464cdbb0f80e3aa1e709fcb1dc9cc41fb466f95834276003f78205f6075ac63ffdc556ab67b20b7438bb58ffcb73923ba632d6aedb75"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:52:40 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r6], 0x102, 0x1) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x400, 0x2, 0x6, 0x7, 0xfffff533}) 12:52:40 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:40 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2731.720053] Invalid option length (1047482) for dns_resolver key 12:52:40 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:40 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x840c, &(0x7f00000001c0)='/dev/nullb0\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:52:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f"], 0x2b6) 12:52:41 executing program 3: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 2731.836214] hugetlbfs: Unknown parameter '/dev/nullb0' [ 2731.842475] hugetlbfs: Unknown parameter '/dev/nullb0' 12:52:41 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x7}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3f, 0xa1d1eb1260921181) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000007780)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000007580)=[{{&(0x7f0000001400), 0x6e, &(0x7f0000003940)=[{&(0x7f0000001480)=""/202, 0xca}, {&(0x7f0000001580)=""/93, 0x5d}, {&(0x7f0000001600)=""/181, 0xb5}, {&(0x7f00000016c0)=""/240, 0xf0}, {&(0x7f00000017c0)=""/126, 0x7e}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/9, 0x9}, {&(0x7f0000007880)=""/79, 0x4f}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/18, 0x12}], 0xa, &(0x7f0000003a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003a40), 0x6e, &(0x7f0000004e80)=[{&(0x7f0000003ac0)=""/186, 0xba}, {&(0x7f0000007980)=""/143, 0x8f}, {&(0x7f0000003c40)=""/143, 0x8f}, {&(0x7f0000003d00)=""/138, 0x8a}, {&(0x7f0000003dc0)=""/137, 0x89}, {&(0x7f0000003e80)=""/4096, 0x1000}], 0x6, &(0x7f0000004f00)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000004f80)=@abs, 0x6e, &(0x7f0000006100)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/135, 0x87}, {&(0x7f00000060c0)=""/9, 0x9}], 0x3, &(0x7f0000006140)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f00000061c0), 0x6e, &(0x7f0000006540)=[{&(0x7f0000006240)=""/16, 0x10}, {&(0x7f0000006280)=""/49, 0x31}, {&(0x7f00000062c0)=""/215, 0xd7}, {&(0x7f00000063c0)=""/32, 0x20}, {&(0x7f0000006400)=""/234, 0xea}, {&(0x7f0000006500)=""/42, 0x2a}], 0x6, &(0x7f00000065c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000006680), 0x6e, &(0x7f0000006800)=[{&(0x7f0000006700)=""/60, 0x3c}, {&(0x7f0000006740)=""/101, 0x65}, {&(0x7f00000067c0)=""/15, 0xf}], 0x3, &(0x7f0000006840)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006940)=""/99, 0x63}, {&(0x7f00000069c0)=""/9, 0x9}, {&(0x7f0000006a00)=""/37, 0x25}, {&(0x7f0000006a40)=""/147, 0x93}, {&(0x7f0000006b00)=""/246, 0xf6}], 0x5, &(0x7f0000003b80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000006d40)=@abs, 0x6e, &(0x7f0000006e80)=[{&(0x7f0000006dc0)=""/150, 0x96}], 0x1, &(0x7f0000006ec0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000006f80)=@abs, 0x6e, &(0x7f00000074c0)=[{&(0x7f0000007000)=""/131, 0x83}, {&(0x7f00000070c0)=""/97, 0x61}, {&(0x7f0000007140)=""/245, 0xf5}, {&(0x7f0000007240)=""/101, 0x65}, {&(0x7f00000072c0)=""/211, 0xd3}, {&(0x7f00000073c0)=""/244, 0xf4}], 0x6, &(0x7f0000007540)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x8, 0x40000000, &(0x7f00000077c0)={r1, r2+10000000}) capset(&(0x7f0000007800)={0x20080522, r5}, &(0x7f0000007840)={0x683, 0x1, 0x3, 0x10000, 0x0, 0xb616}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001380)={0x53, 0x0, 0x1000, 0x8, @scatter={0x2, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f00000001c0)=""/151, 0x97}]}, &(0x7f0000000280)="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", &(0x7f00000012c0)=""/118, 0x40000009, 0x10, 0x0, &(0x7f0000001340)}) r14 = pidfd_getfd(r8, r13, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x10, r7, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r15}, 0x2c, {'wfdno', 0x3d, r16}}) ppoll(&(0x7f0000002880)=[{r10, 0x118}, {r6, 0x440}, {r3, 0x4}, {r11, 0xb026}, {r14, 0x240}, {0xffffffffffffffff, 0x8}, {r4, 0x1000}, {r12, 0xa8}, {r9, 0x4}, {r15, 0x4185}], 0xa, &(0x7f0000007900)={0x77359400}, &(0x7f0000007940)={[0x5]}, 0x8) 12:52:41 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:41 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2fe5efdfa57cadc31395ed64"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:52:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 1) 12:52:41 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r6], 0x102, 0x1) capset(&(0x7f0000000280)={0x20080522}, &(0x7f00000002c0)={0x0, 0x400, 0x2, 0x6, 0x7, 0xfffff533}) 12:52:41 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffc, 0xd19ac0) r2 = eventfd(0xc0000000) dup2(r1, r2) r3 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:52:41 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2732.037448] FAULT_INJECTION: forcing a failure. [ 2732.037448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2732.039347] CPU: 0 UID: 0 PID: 36999 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2732.039383] Tainted: [W]=WARN [ 2732.039390] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2732.039403] Call Trace: [ 2732.039411] [ 2732.039420] dump_stack_lvl+0xfa/0x120 [ 2732.039462] should_fail_ex+0x4d7/0x5e0 [ 2732.039495] _copy_from_user+0x30/0xd0 [ 2732.039526] sg_write.part.0+0x1c2/0xb50 [ 2732.039550] ? __might_fault+0xe0/0x190 [ 2732.039579] ? __pfx_sg_write.part.0+0x10/0x10 [ 2732.039606] ? perf_trace_lock+0xb5/0x5d0 [ 2732.039646] ? __pfx_perf_trace_lock+0x10/0x10 [ 2732.039678] ? lock_acquire+0x15e/0x2f0 [ 2732.039705] ? perf_trace_lock+0xb5/0x5d0 [ 2732.039729] ? find_held_lock+0x2b/0x80 [ 2732.039762] ? get_pid_task+0xfd/0x250 [ 2732.039787] ? perf_trace_lock+0xb5/0x5d0 [ 2732.039816] ? avc_policy_seqno+0x9/0x20 [ 2732.039836] ? selinux_file_permission+0x99/0x600 [ 2732.039874] sg_write+0x86/0xe0 [ 2732.039896] vfs_write+0x2b7/0x1150 [ 2732.039919] ? __pfx_sg_write+0x10/0x10 [ 2732.039941] ? lock_acquire+0x15e/0x2f0 [ 2732.039965] ? __fget_files+0x34/0x3b0 [ 2732.039988] ? __pfx_vfs_write+0x10/0x10 [ 2732.040011] ? __fget_files+0x203/0x3b0 [ 2732.040032] ? lock_release+0xc8/0x290 [ 2732.040062] ? __fget_files+0x20d/0x3b0 [ 2732.040095] ksys_write+0x121/0x240 [ 2732.040119] ? __pfx_ksys_write+0x10/0x10 [ 2732.040154] do_syscall_64+0xbf/0x360 [ 2732.040178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2732.040202] RIP: 0033:0x7efff4616b19 [ 2732.040219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2732.040247] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2732.040290] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2732.040311] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2732.040328] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2732.040346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.040363] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2732.040415] 12:52:51 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:52:51 executing program 2: ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capset(&(0x7f0000000140)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x10001, 0x66a3, 0x7, 0x8, 0x4, 0x2}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x60000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ppoll(&(0x7f0000000180)=[{r0, 0x8}, {r0, 0xb240}, {r1, 0x46}, {r2, 0x100}], 0x4, &(0x7f00000001c0), &(0x7f0000000200)={[0x5]}, 0x8) 12:52:51 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) openat$cgroup(r1, &(0x7f0000001800)='syz1\x00', 0x200002, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = dup2(r2, r3) recvmmsg$unix(r5, &(0x7f0000001780)=[{{&(0x7f0000000040), 0x6e, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/172, 0xac}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000300)=""/255, 0xff}, {&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f0000000500)=""/193, 0xc1}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x7, &(0x7f0000001700)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}], 0x1, 0x40, &(0x7f00000017c0)={0x77359400}) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000001840)) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 12:52:51 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:52:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{r0, r1/1000+10000}}) 12:52:51 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 2) 12:52:51 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r6], 0x102, 0x1) 12:52:51 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2741.892606] FAULT_INJECTION: forcing a failure. [ 2741.892606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2741.893804] CPU: 1 UID: 0 PID: 37125 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2741.893824] Tainted: [W]=WARN [ 2741.893828] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2741.893835] Call Trace: [ 2741.893840] [ 2741.893844] dump_stack_lvl+0xfa/0x120 [ 2741.893870] should_fail_ex+0x4d7/0x5e0 [ 2741.893890] _copy_from_user+0x30/0xd0 [ 2741.893907] sg_write.part.0+0x5fe/0xb50 [ 2741.893922] ? __pfx_sg_write.part.0+0x10/0x10 [ 2741.893937] ? perf_trace_lock+0xb5/0x5d0 [ 2741.893955] ? __pfx_perf_trace_lock+0x10/0x10 [ 2741.893973] ? lock_acquire+0x15e/0x2f0 [ 2741.893988] ? perf_trace_lock+0xb5/0x5d0 [ 2741.894000] ? find_held_lock+0x2b/0x80 [ 2741.894018] ? get_pid_task+0xfd/0x250 [ 2741.894032] ? perf_trace_lock+0xb5/0x5d0 [ 2741.894048] ? avc_policy_seqno+0x9/0x20 [ 2741.894059] ? selinux_file_permission+0x99/0x600 [ 2741.894080] sg_write+0x86/0xe0 [ 2741.894092] vfs_write+0x2b7/0x1150 [ 2741.894106] ? __pfx_sg_write+0x10/0x10 [ 2741.894120] ? lock_acquire+0x15e/0x2f0 [ 2741.894135] ? __fget_files+0x34/0x3b0 [ 2741.894147] ? __pfx_vfs_write+0x10/0x10 [ 2741.894160] ? __fget_files+0x203/0x3b0 [ 2741.894172] ? lock_release+0xc8/0x290 [ 2741.894188] ? __fget_files+0x20d/0x3b0 [ 2741.894205] ksys_write+0x121/0x240 [ 2741.894218] ? __pfx_ksys_write+0x10/0x10 [ 2741.894237] do_syscall_64+0xbf/0x360 [ 2741.894250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2741.894263] RIP: 0033:0x7efff4616b19 [ 2741.894273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2741.894285] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2741.894297] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2741.894305] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2741.894313] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2741.894320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2741.894327] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2741.894345] [ 2741.904623] Invalid option length (1047482) for dns_resolver key 12:52:51 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x110) chroot(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2b6465762f6e756c6c621c00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:52:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 3) 12:52:51 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x12, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) close(r0) 12:52:51 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r5], 0x102, 0x1) 12:52:51 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:52:51 executing program 5: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2742.151531] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2742.151531] program syz-executor.1 not setting count and/or reply_len properly [ 2742.165867] FAULT_INJECTION: forcing a failure. [ 2742.165867] name failslab, interval 1, probability 0, space 0, times 0 [ 2742.167690] CPU: 0 UID: 0 PID: 37319 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2742.167731] Tainted: [W]=WARN [ 2742.167740] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2742.167756] Call Trace: [ 2742.167764] [ 2742.167774] dump_stack_lvl+0xfa/0x120 [ 2742.167822] should_fail_ex+0x4d7/0x5e0 [ 2742.167859] should_failslab+0xc2/0x120 [ 2742.167892] __kmalloc_noprof+0xc8/0x6e0 [ 2742.167930] ? finish_task_switch.isra.0+0x206/0x840 [ 2742.167973] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2742.168022] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2742.168061] blk_rq_map_user_iov+0x1fd/0x1180 [ 2742.168100] ? __lock_acquire+0xc65/0x1b70 [ 2742.168142] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2742.168188] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2742.168227] ? find_held_lock+0x2b/0x80 [ 2742.168265] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2742.168293] ? lock_release+0xc8/0x290 [ 2742.168320] ? import_ubuf+0x1be/0x220 12:52:51 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 2742.168368] blk_rq_map_user_io+0x1cf/0x200 [ 2742.168412] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2742.168454] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2742.168500] ? irq_work_queue+0x9c/0x100 [ 2742.168536] ? __asan_memset+0x24/0x50 [ 2742.168567] sg_common_write.constprop.0+0xd75/0x1710 [ 2742.168607] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2742.168642] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2742.168678] ? ___ratelimit+0x465/0xa10 [ 2742.168724] sg_write.part.0+0x6a2/0xb50 [ 2742.168753] ? __pfx_sg_write.part.0+0x10/0x10 [ 2742.168784] ? perf_trace_lock+0xb5/0x5d0 [ 2742.168821] ? __pfx_perf_trace_lock+0x10/0x10 [ 2742.168857] ? lock_acquire+0x15e/0x2f0 [ 2742.168888] ? perf_trace_lock+0xb5/0x5d0 [ 2742.168916] ? find_held_lock+0x2b/0x80 [ 2742.168953] ? get_pid_task+0xfd/0x250 [ 2742.168982] ? perf_trace_lock+0xb5/0x5d0 [ 2742.169016] ? avc_policy_seqno+0x9/0x20 [ 2742.169038] ? selinux_file_permission+0x99/0x600 [ 2742.169082] sg_write+0x86/0xe0 [ 2742.169108] vfs_write+0x2b7/0x1150 [ 2742.169134] ? __pfx_sg_write+0x10/0x10 [ 2742.169159] ? lock_acquire+0x15e/0x2f0 [ 2742.169187] ? __fget_files+0x34/0x3b0 [ 2742.169213] ? __pfx_vfs_write+0x10/0x10 [ 2742.169240] ? __fget_files+0x203/0x3b0 [ 2742.169265] ? lock_release+0xc8/0x290 [ 2742.169299] ? __fget_files+0x20d/0x3b0 [ 2742.169337] ksys_write+0x121/0x240 [ 2742.169365] ? __pfx_ksys_write+0x10/0x10 [ 2742.169405] do_syscall_64+0xbf/0x360 [ 2742.169432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2742.169459] RIP: 0033:0x7efff4616b19 [ 2742.169478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2742.169504] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2742.169529] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2742.169546] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2742.169562] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2742.169578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2742.169593] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2742.169630] 12:52:51 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) mount$9p_tcp(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@noextend}, {@access_client}], [{@euid_eq={'euid', 0x3d, r1}}, {@obj_type={'obj_type', 0x3d, '#]('}}, {@dont_hash}, {@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, '\\#'}}, {@subj_user}, {@measure}, {@smackfstransmute={'smackfstransmute', 0x3d, ':'}}]}}) 12:52:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:53:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 4) 12:53:01 executing program 5: capset(0x0, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:01 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16=r5], 0x102, 0x1) 12:53:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$KDSKBMODE(r2, 0x4b45, &(0x7f0000000040)=0x3) 12:53:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:01 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)={0x0, 0x400, 0x0, 0x0, 0x0, 0x3}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x1000, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)={0xfffffff9, 0x1, 0x0, 0x4, 0x1ff, 0x2}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:01 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x800040, &(0x7f0000000240)={[{@none}, {@release_agent={'release_agent', 0x3d, './file0'}}], [{@uid_eq={'uid', 0x3d, r1}}, {@fowner_eq}, {@fsname={'fsname', 0x3d, 'debugfs\x00'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@audit}, {@subj_role={'subj_role', 0x3d, 'cgroup\x00'}}]}) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/dev/nul|f0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:01 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc0ed0000, 0x0) [ 2752.328074] Invalid option length (1047482) for dns_resolver key 12:53:01 executing program 5: capset(0x0, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2752.379415] cgroup: Unknown subsys name 'uid' [ 2752.397797] cgroup: Unknown subsys name 'uid' [ 2752.406735] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2752.406735] program syz-executor.1 not setting count and/or reply_len properly 12:53:01 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc0ed0000, 0x0) 12:53:01 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:01 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) geteuid() r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) fstat(r0, &(0x7f0000000140)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) execveat(r2, &(0x7f00000000c0)='./file1\x00', &(0x7f00000003c0)=[&(0x7f00000001c0)='/dev/net/tun\x00', &(0x7f0000000200)='/dev/net/tun\x00', &(0x7f0000000240)='/dev/net/tun\x00', &(0x7f0000000280)='/}@-^%\x00', &(0x7f00000002c0)='/dev/net/tun\x00', &(0x7f0000000300)='*&\xc2O-!.(/\x1f{r[\x00', &(0x7f0000000340)='^\x00', &(0x7f0000000380)='/dev/net/tun\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='$*#\x00', &(0x7f0000000440)='/dev/net/tun\x00'], 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:01 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0xc0ed0000, 0x0) 12:53:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 5) 12:53:01 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x614140, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000040)="9d653e89c39d43ca9e727dfadcc27d36b4c7ddb321f41f834377e45d985645a12e1b20a617a65282cd822049e7a0b87c24e032cf7dc9e67bf5572477461af6cf620b7bfe953e61e3a62f2cb46080454b") r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x2, 0x5b53c1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x7fff}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4050091) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xe) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000340)) r4 = dup2(r2, r1) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:53:01 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040), 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:01 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="836a61847309660400150000000000", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pread64(r3, &(0x7f00000001c0)=""/137, 0x89, 0x2) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000140)={{0x2b, @empty, 0x4e23, 0x0, 'fo\x00', 0xc, 0x7, 0x5a}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 0x2f5, 0xffffffff, 0x870f}}, 0x44) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000280)=0x9, &(0x7f00000002c0)=0x2) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 2752.648799] Invalid option length (1047482) for dns_resolver key [ 2752.707944] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2752.707944] program syz-executor.1 not setting count and/or reply_len properly [ 2752.719319] FAULT_INJECTION: forcing a failure. [ 2752.719319] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.720251] CPU: 1 UID: 0 PID: 37703 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2752.720272] Tainted: [W]=WARN [ 2752.720276] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.720284] Call Trace: [ 2752.720288] [ 2752.720294] dump_stack_lvl+0xfa/0x120 [ 2752.720321] should_fail_ex+0x4d7/0x5e0 [ 2752.720339] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2752.720357] should_failslab+0xc2/0x120 [ 2752.720374] __kmalloc_noprof+0xc8/0x6e0 [ 2752.720393] ? trace_kmalloc+0x1f/0xb0 [ 2752.720415] ? __kmalloc_noprof+0x29d/0x6e0 [ 2752.720431] ? bio_kmalloc+0x3e/0x70 [ 2752.720446] ? finish_task_switch.isra.0+0x206/0x840 [ 2752.720471] ? bio_kmalloc+0x3e/0x70 [ 2752.720483] bio_kmalloc+0x3e/0x70 [ 2752.720499] blk_rq_map_user_iov+0x390/0x1180 [ 2752.720520] ? __lock_acquire+0xc65/0x1b70 [ 2752.720541] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2752.720562] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2752.720582] ? find_held_lock+0x2b/0x80 [ 2752.720599] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2752.720614] ? lock_release+0xc8/0x290 [ 2752.720627] ? import_ubuf+0x1be/0x220 [ 2752.720648] blk_rq_map_user_io+0x1cf/0x200 [ 2752.720669] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2752.720688] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2752.720710] ? irq_work_queue+0x9c/0x100 [ 2752.720728] ? __asan_memset+0x24/0x50 [ 2752.720743] sg_common_write.constprop.0+0xd75/0x1710 [ 2752.720762] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2752.720775] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2752.720792] ? ___ratelimit+0x465/0xa10 [ 2752.720815] sg_write.part.0+0x6a2/0xb50 [ 2752.720829] ? __pfx_sg_write.part.0+0x10/0x10 [ 2752.720844] ? perf_trace_lock+0xb5/0x5d0 [ 2752.720860] ? __pfx_perf_trace_lock+0x10/0x10 [ 2752.720878] ? lock_acquire+0x15e/0x2f0 [ 2752.720892] ? perf_trace_lock+0xb5/0x5d0 [ 2752.720905] ? find_held_lock+0x2b/0x80 [ 2752.720922] ? get_pid_task+0xfd/0x250 [ 2752.720937] ? perf_trace_lock+0xb5/0x5d0 [ 2752.720953] ? avc_policy_seqno+0x9/0x20 [ 2752.720964] ? selinux_file_permission+0x99/0x600 [ 2752.720986] sg_write+0x86/0xe0 [ 2752.720997] vfs_write+0x2b7/0x1150 [ 2752.721011] ? __pfx_sg_write+0x10/0x10 [ 2752.721023] ? lock_acquire+0x15e/0x2f0 [ 2752.721036] ? __fget_files+0x34/0x3b0 [ 2752.721049] ? __pfx_vfs_write+0x10/0x10 [ 2752.721062] ? __fget_files+0x203/0x3b0 [ 2752.721074] ? lock_release+0xc8/0x290 [ 2752.721090] ? __fget_files+0x20d/0x3b0 [ 2752.721108] ksys_write+0x121/0x240 [ 2752.721121] ? __pfx_ksys_write+0x10/0x10 [ 2752.721140] do_syscall_64+0xbf/0x360 [ 2752.721154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2752.721167] RIP: 0033:0x7efff4616b19 [ 2752.721177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2752.721190] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2752.721202] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2752.721211] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2752.721218] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2752.721226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2752.721233] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2752.721251] 12:53:14 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:14 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000180)={0x20080522, r0}, &(0x7f00000001c0)={0xfffffcb9, 0x81, 0x7, 0x61, 0x3, 0xfff}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) r1 = gettid() r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r2, 0x12) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000280), 0x10400, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x4a, 0x3, 0x1, 0x40, 0x0, 0x4, 0x8280, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x0, 0x5}, 0x1, 0x1480, 0x3, 0x0, 0x8, 0x1f, 0x1, 0x0, 0x9}, 0x0, 0x7, r3, 0xb) capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r6, 0x12) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f00000000c0)={0x100, 0x4, 0x0, 0x400, 0x10000, 0x8000}) 12:53:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 6) 12:53:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x208080) r2 = dup2(r1, r0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x34082, 0x0) r4 = accept$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) io_submit(0x0, 0x3, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x981, r3, &(0x7f00000000c0)="8d3bb5ea1ada16d61d15644ce607e028d232e5838f6f04327d4d8b7aa2221b882083fc0d469a93e248f07c70637b0be6351d3b4a397df193b18c567d3e6074bb3d69a58c7aeae60e44c03d3329abfc2b0c31937ecdd227496c7eacd7e2467b1717f117ff0229c08d7ac42ac86abe4ed0303eb5a06b019fd140f089d7818614ffb2bd7a7628208247688f51594ee6fa94d3d77421d9d1dfb9cd7c98a0683d544e832be8ff98d0904d51f82552617dea50d404aa3e1509ea651dd0a2e08c57c2e77689d3451576f278dba980", 0xcb, 0x6, 0x0, 0x2, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x0, r4, &(0x7f0000000300)="9438c2f8863268c8668fbc6ba01ea94974e344d6a0ac33ebbc81bf8e81b27dc370d3995e3b3247d9281833b222ad09704f2b74f43216ad87a51c5e834d45a47ec83991791a2502faeb2675dada47879d917ffa1ebf263456e08a793ae08b4001942f9dea714bab46d61364954bfad0d2667a907fa6c388d2730821d46d3e4cb528d97430eed5c6b055ddddbe0ca47bb704eea36d3703101c44b61ebef001ce35dc0b915273aa2dc41478a57477eaaf08baa4383a4e96202296c18f0df39473", 0xbf, 0x6, 0x0, 0x1, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x3f, r2, &(0x7f00000003c0)="907308c396a361747faac642f83d6926e0478e18fa498c820d47c426fcb3565c1689495b2c916f7ded6b398b72", 0x2d, 0x627, 0x0, 0x1}]) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x8, 0x1f, 0x8, "5789bc2e18f4c646"}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) syz_open_pts(r2, 0x208000) 12:53:14 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) pipe2(&(0x7f0000000040), 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:14 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:14 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(r0, &(0x7f0000002740)='./file0\x00', 0x400, 0x4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r4, r3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002880)=0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x95, 0x9, &(0x7f0000002640)=[{&(0x7f0000000180)="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", 0x1000, 0x1}, {&(0x7f0000001180)="2abea2767cc7ed82f1659f02debcaee7000ef65192df162b80ddd4994cae5d826fa744d8c02d3505d538173bf7bf9c92d4dcd8116d905a658edc305797a2b317c45f2d8d5c7ac0c4430741bcc0fb61469ca37a27b32f03e1bc208319f99717e5f24be055090a98147b29b51b77603d691e7194c1b95749e4a92099bc4ab2f57db3c6f4103b14baa76d196b891fde8d314ed3f4ce5ce3090c96f1e9e4a01410bdafe096778b3c8f37e0f0ca2c0cb489e15455ebd5ab9fa295fb86b933ab9acc543598d413194008aecf0d58eb303ee7cbaf8fba03762fedff6b44e5fa945640517e2c0c29931593e43387", 0xea, 0x5}, {&(0x7f0000001280)="1ca889e650c2f094316a2b5e92a1dbddde58b4ebe1c89639cccc00008183f912525c63347e3afe2489d89be1ca5e144be789852c55ebe4e544b79cf300c8c24f039d85dfac3afc5bcf6b40c2db54f40a73c756ca5017aa7884f29cacf6a9c014b6cfcae5c79d63a50d24e8ae1db5d3f4e74fc43c683a8c5244646fd7b1117a5ebe7d85d0aaa8c79a28f75c218a15bdd7de2351886671f3c9789216a3dd80fd7a9793172c99d6b00077b7de1749a343c9829939430498c0d4f12bb5aaa4b5eada2a6e500f84d04559068ce0c67039a97a7a98493f5921b90470fa8314e0d3b42094", 0xe1, 0x81}, {&(0x7f0000001380)="4011b0c55e4cdc56ee5242608e22ee0a3db65de40eb32e8b51f58fceb4a0b20b087ab8c6f13851c39234dce53dd12efebeb0dcdf6a7c948d49be47dd3b4bf9eeee2655ae62d08c4de8590c49aac2735e55f9ae55f0bc64d5f9bcd435df2c07c7e5b4e5614b1638a079e6cf80d6bc707eec8462a4a6ae7940a60186328eb4d3b758f114e0d47fb72d4c91", 0x8a, 0xffff}, {&(0x7f0000001440)="05b6e2ea39e1a45394ba6a26ddb11e34338021a2973eb306af7e00b263ef1bbd1de999aff090e1e2ccffd0fad029b957f5455da825f092ec5d19b8423377da798f3fe643aa4d6947e654e0570a244cc289a735ba80775aa7984c6e0f21044003da571a0e3c52a1883ecada9d2d44360a5e867a15a5cf2f996a56aa3d2baa1f9ee2143241abb3d25c4ff6800cd2ab52c71b94ee49a5178d85c7aea56bde17bd03991a4624266e32d772e1c38a62a9597d31150251a8a68ac7f5ad48a4e41f2c0e215df18a90c417470cb5eea86ef2ab3affd31cc88d680f50b86966b169f98195a24268bfc287c9a8c01507269bdd7e263e8185062e2b88ca1d6c5b80d3b7da740df326db1b62cacbd16e17a1dff1cd0372509d6b7066378f3879fe21c3d1b2e7f68383bf2776ebed030a4d6cf226ca70b2275d6106bbe0f88d4584c3977c1f63180afc2d720bb72f500226dc2be295904d84273608e6b5a3d4389945c6e1d65e3ce766b33f5122036f3275666c438f55c1b1363e5fc4b9137c08436cb4d022b708d81d0e2cd268054a6bcd621c43f3c2e2ab97cb7aefb86a1d23e7acc27c4f07b1f5be5c99b49b5eca21b5314ba588f6ad1395de6e65c853907752bd0e778a2d3151aa956c87697258c74fd3e4f6d0f26c6d3a4779e30678d52fa3f9e524508f48b201a81983f8dd05581b72b9e3b24786db942b52f764afe5924305e54bb95e90bb151250ed72660568654a6ffa0d88d7dd8073c4746f147694e175f6d99f23f32fb473652d3a6c6e6480c60678b614320dbc24380d466bc4bf7bcc5877896f1661a09e080741138742183b1c8890003797c1297904dd01bd1a4737dfd0409a462f6e6117ac394a5e3e5f76f7e5150ade5d89fdf1f357d1816fe4d9558801ac3f5b6026cf41a785124d0213956d2817fc668142febfbfc51f02ad01daf6bd8302c8ef4118e3369ebffe7af1d00f3ed9afe7af3ed3f45c33ab3930d6368ca9624dc722d1310fee061e6a157f024581e8b3ac664f649b20d4c803047b7e0495b2069faee5fb4c40556e563c76a438ec6b2436fba7bfa708bf8caac3fa8a76e74b61ccffbb9984ced690a91ca6af3fc9ea73930cbdb8dab468134e0c4a699b082ee5c8681037dcbb7cca653c4f68a1139ff610f741db757df3d5d515e9bf880d58579bcd7eac02b60780cbe616a9d79dc8f09c67cec990d25e7fe2c2ecf3f6fd9ef35d72dd8c44d0af70d5bb2628add3b2ebe49bdfc74e3b71c35c602247a9cc0c8d621db174dce15bdccfdcd70020f8b4d39cbc66e1b03934ca97119990b5d04022f893f44db6ef0fc846ded9e470860a072afff727ce870bd6584341d2a76d7bc0159aef8ff6f8cc66219f9d19c6e26b1483068295ea226b0f62d6c95025fc8ac1d0bb9322cda16b3f966521bf71c6775e9d6b29d5b3b75d795502fef2f43f9e60e292955c5a06d2e041dc0f9f126d945ff7ab6d2161d75e4de2672b1d396cfa3c1e297944224d0c2f6222f1413a8e759c1f10e2f43e5491ab6e5e2274b8315c51f8b811c5d452824cf148cfcd72cf9433ebc61f7510b19c99c4d1cc6263352e8306aeb8bb3cf6d7c7e52c32e6007ed47c73d13751fb594643524bb200c8d0c7e29f57010c02bbaad64422679afebdff1a4a8756bfba48a51b579c344e898f0f15743bc46e23c3c177e3d22e2220b507d8e4220df82bb8ad290f7dbea9240acd39768b17a36119e54936cf3a27e8b14cd94a138ce2e7c87a3b4bfaf5261b7221c674aad5c33d7035b911756c36783cf8f04313ba52e192c06ded9840177cf4c9404ddf840d0b51765bf447d30d31ceee850f21668ab98eb10b1118129b4875ba5c82c8dd7c1068f6c962616a719f2220a7a26d8e1465f6160f34dea0f6d6ec94144b050b2e3494c2e7e8e4035a612355924d9f78b8cd93df2d10ebd246b4bd316033a65fa344e64245b66b800b2b4da9c290c4679270a40926d43096ceee2f649de58408130c7723ab80a1b3541467c7d7d9e133768af59180eb2ee2efa857149ae7c8335875c2c970016e450cec5180ac7d430454408243a43acfc52420bfa9644bc1ae51c9da2982e536a66c7dd7f5b1d5555366ded2dd42a95817e4f3f43faef6fb8769c342a44a1722fa151fcf46be83db8b85fd723acccbab062106b95ef08437617142f15a064cc67cb09e86fcf33f440652941728cf9f361a7a7bac8e0420feb15d8385f5d2abaf32d87db38a3e62055ec79f7b77589f2bb18f6d29e3f063368f5bb5d036ac75559d11bd4e4b327f74dabfe5910e18eae6d7f89aff843825e3fcd3bea07421091f8be4b3491d280ca0c7c17ba23324ade188b978268ac7eb09098ae07cd46c48c671d05c64cc84adc77847679e23910aa2166c8670b9bf90eba707c90d4282c8bafb55be3c8bff60063e430a125b8e41ced0a8411ad5865b35fe414a184929d16cb6c6a3f43b1d358212a9aa0f1e7bce97366f3d44b99509d662552189a9216510f315a1f30e89354cbb42b1685dfce64c7184a52fe4baf9484aaf48bfe91d9ff9cd26d70e91421391308c29ef1b69830a6fa0ba6bc0727f56e8676c7a605e9eda5d022cc785d917ade19925fdc041cda0d54d4b9f7affe837c89b38d43589ce0b622acb661a26041d8970ed763e2345b56d1a06868e98110381e6105ced025fbdf409c6898594598c6db56170ac85391cbbd35a6ea5a0f1e91cd72a726b9686175328db98ce2c34791e6f80f68c084ae8bc47bdf178178ab9f6addc2a860b760efd7790db03065f09a3749aa83a526e9a01b013f09dbea6c0aa82294c5811f9c1dafcf6eadc654bc2c86ee6543e1e59673aa5f5089220a13e951f21cebb9e1d82ec4ad6041c93773c4ced4bb209945048ff9b6cb58ef65169a530047bd95f6b2c585dd625db62fdfe9d8a328c6323ed651dede58173dc04c1e3f9675372009f2a77ec77b01d95c8d2bcc73a49bc0ab7b5be51f76b767cd59e16a5dbc947d863c8b6f51c925dfeda74bdc60d72a10034d42d69e32a579f5e658ecb61487c8aeac1650ba1027acedd185616fd392b8d39793870b6558da6920be9f13a574357356cf53987e4ac08a54fb1bc53a1ca0bc138a6c052bf893162c4d5d440b6a3015ee8fa79960823f88b6578dc3fea4270f24e069877141428ea5cdc62150fca4372f97fb4fa3018a95e6d8225255d7105f3827b522380b1c86f544ca8ebbac086e4cb389609c18c3fe81a86fdbe4560c64134ee72ba90c4ad7e1e4315fb8d35d24f4c9dbed7f7b5effc90acaf425f091b2d3bd59a77abab3697fc3fe8a27bb5358fa32bc1e2219ea85e166b8e0986ce4098d699b4313146266b2b27de50e36b221aaacb5f4506f4acc890e0c80e39c62e25d44c5b24014c574624240686f68f41f902fb0577746d6a318ef2b8ba7cb200955a6120776275f925c580c2905e98ca67977c65383c2fa55374a40eeefb9810f80ab940d801e395406deae991882a9917246272266ce68e4eec35c34a7edae8b7cb0200ff24a135fb0d4c89382ceda22ee757cd21fca86db557113dd3c19404602ecdda239fd009937b45ac9791f3f81d46aa57ebf1ade6428dc3cd9e77c20b6fa013f68881d917f9dfc762274450d6d43fac7f4ebd9723b62193debe35dfa46c50fdb0ae74b55bafa712d6fc9a7103dd0838cb855411f6f95f6b263ce19a0f9dca4820c9754240e7f4368d5cc525ecc2842070b84dc4be62b81973915a78bb6a1a453715d3fc46156ec1e544e899315a7d322380ff634a55e3af5692e9197ca617efe187ea51712b15885a0b2c7d512b0c47d9d194f73ecbe28cbb0c4d684f8025e873d0aeb804436a1980d836d4fbd8aeffd6d23600be0afd34f75c33895e6e458d469d7d0c44f3ddb7970bc709c5a91dd6a40379f37f4d522349c264b9261c67570d23afa33b789f484c951619c970556754bed0a875594537984d629cb530c307fc16742210ab17610384427920f36919a9ffab79647c71bb064c6ab54324dbd7239362e681809284a8ed8879529dec04f7e1c71e13c832cd38336da06485585a5b4c361d804b450857e0fd687edad56051e256b42b5a6df1f4d2bd8b6620b1f7db007cfa42dca6cd1400c72cc70808d91d2fcac2f9d7c11d04444d03c76d2f18a9ce2c36fb4795cc52d2481ea920d1d9d2022593b08896a391e1da6c1628c4c0780a18bb636af3c0dd9f776f83f94b852d79c55b8195243228b99f64f9d0250923d81f8d46e32e03baeeec7483606a4b05bb0be83dd3e6967214bdc89e1f0b3d4e0679731845ce15b4a85a2e21bd98cc8f495254f6b01dae37472d2612d42a964056a265e8e3432fc82178fcb3d993362e69fd0271fce1daab825f2a30ecf66a19cea0e17572c8faf433390de32a7ca8f9203ccf9cd891d0576a828cd9806ac62796b1d1b28f0dde65c92766bdab2fb0464cfa1d5f0d0e13a6cfa308d71eeecbe9d3bb6dad0a22d0193823945fa6cc30459997a0b16470858c4ae06b981705b88892e42572a0e9971a9eb550e0cfa6fb9dfee0232f5ab3bb08336c57bb7368f2a24745667ba4be23005606c62f9b493479c6ced61e1c836651371733da9d3f839a00750c70ef5609761053d1bf7702488a233b6ae32a928495a408691a9a504bd2ef0c7d13525b41a29f920ff3ab66e40fe3feb73ffad289210210aaaf46a50b9c3e01579860c99d866e1b29ffc1d400687656616fe5183b8bfbaad76af966dad4ac7542f64fb478e6738b24d34dc39a6d93c1202fc89612bc58ec60294a8289cca8c377483b21dd656d844cfd2fe8bf85f73f272af8c6a62cc765dc9680b22bc7ba6f0bc8776f1297e849c4fc403897ca954d20ea1fc5281d84ee66b93b7defc3a780182043e8187315c33208851cfc9950b1f8eda46d21cb883f1ad6392a0148d41c606e75620b9c069cea3291d4bad5f9fc70c0e996b3f6bee26de7e0922535f6c111b3c4ea97671964df3ce2775db264c36fe3320d5b4ec4131a3fee8fac17b65937b279f6e456dec3b289ec73234ef883bd06aaf6ed227c0ca837b76bdeef279e612232bab028997293a4faccd385629982ecbd93f25626d314f924cbf8d888049d449ee9d32978702d38d5446b95df94b215dde5268da43b2943de8b11a1e706d966fddd4bba17870e1dc11712d21efdb92866e959259294972127c52816285d270b6e278fc7a5c419b62ab7e095c4bde107a9521b94f6137ab0f3aa52656b76c293b219b95b5791d19135e4760f00771cf1b2144083f6a19db3734b44934b216487fb83d2eaf2eefcc505ea704d42f17c6e7d8809da3f0e7309205dbd8d9066aa7ae3b9b0eb19524213b310d7becc967275234a76e24784fdf7419bfff09789350fcdca27f90315f4e9e5ea2cabf7d988926635ff18c3357f25f2de166b935eff61c4cef74429433b4381ece5a4bdfebc7ea5990ce740cd4c31e47d66d4fb6e0a7243c60902aaf7928cfc6c551b14f3e8c7d6227f7732e18bc88820165ba25da705711e87c51fb32ed4a9c39bf59f9f46d33886ff4dcbc13654c3cdb350d475951af20370c841bb9358f5272e9f6c89cd0d23a9b38b727c2f121d048b8c0a06b430bc22398e1f1ae6c7738d18e5268ca58a29c4d61248b7ba1c14beb01fd378c05813907aae08429fcc9c32d03cd2734c5c4ea1b09a50cf847d7831b12abd4dbaf3de901ff223040ab442b72852dab151c9400bd734da800b7d91a3d47f3fe5b7b65e3cbd8ba67a8d82133d344fa19077da7def96af391eeb2e13e63201c75848", 0x1000, 0x43}, {&(0x7f0000002440)="faacb30f68031fe8f877c4b527962a1bd5", 0x11}, {&(0x7f0000002480)="683d01254b1f092fa84130cb976a523c7f9e15ce15c437811ba9830b754ca561bebb795d3be46a773cac6f0edf5f6352fc5f4104d1c7ebe64087b2c39301c1798ee8af99bf5e663021975316ea576252ade45a969b56b5b723ed00b6a40acd6bf6f7d32cfb9fb40456899a6b21bd1c9216e2afddc9495dc553852e00ec00f2a368", 0x81, 0x1}, {&(0x7f0000002540)="342691ce1c8ca026416db50c429f63c692c448f899f97ebb84dd69555e6a86af3459c676e89e556446f92416059db4fd5f941d94c99d4403e3fa672ec6ac12406207b3d5f65bd76aca9ebfb32d442e00cd58d180710518735d4fda889d35e3f118833475f244c6c686fe4c101427b7886eb8394476127e02a2a963dd", 0x7c, 0x2}, {&(0x7f00000025c0)="ee72d844d4cbde1f48aa48164bcaa831c855cd791f07a69818e30aae1c6b48557be5fede0b97bed33c92ba0a5d565217026ddfc12820f3a36a480c0b6cd2262c70c1507f66129bd0ef660c904aae876b4e85f4c9a519b7e6048e2de2b224780915aa8dd2a4", 0x65, 0x3f}], 0xcf233d3da741abb3, &(0x7f00000028c0)={[{@gid={'gid', 0x3d, r1}}], [{@fowner_gt={'fowner>', 0xee01}}, {@pcr={'pcr', 0x3d, 0x2f}}, {@uid_eq={'uid', 0x3d, r3}}, {@uid_eq={'uid', 0x3d, r5}}]}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:14 executing program 5: capset(0x0, &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2765.222213] Invalid option length (1047482) for dns_resolver key [ 2765.244151] loop0: detected capacity change from 0 to 255 [ 2765.261292] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2765.261292] program syz-executor.1 not setting count and/or reply_len properly [ 2765.295461] loop0: detected capacity change from 0 to 255 12:53:14 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$sg(&(0x7f00000025c0), 0x9, 0x600100) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SG_IO(r3, 0x2285, &(0x7f0000002640)={0x0, 0x0, 0xe9, 0x5, @scatter={0x8, 0x0, &(0x7f0000002440)=[{&(0x7f0000000040)=""/241, 0xf1}, {&(0x7f0000000140)=""/18, 0x12}, {&(0x7f0000000180)=""/224, 0xe0}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/86, 0x56}, {&(0x7f0000000280)=""/12, 0xc}, {&(0x7f0000001380)=""/181, 0xb5}, {&(0x7f0000001440)=""/4096, 0x1000}]}, &(0x7f00000024c0)="07e2250a321ad75e6bcaaaeb1ba22e2861b573d53786fd8ca454f33cb566ffaec42d50d6d66a51f2c431f364c3eb313d09169e002a8b997443957bc53bbefe7a04e41fdf9c9e9cfc37ebd417e44e632a7cc8cc5ca790ba591c9d4911e48cfed07d7b8fb8833693fdabd3e63a15ca17dbcb71d1380bf502cffe52d7d04ab73056399466fbe39b7eced8e8e8a35a39a0ca2a82da114a8d44a298b1d1745d18a3f41cf9b91d63aa6938a5d91c12cc562f968b861d87bd59e62465bb5b9f2b3ceae4ac5489b3e85b5adf5babb64909222885936d92ca902d5ed06861b1980ecff9d9640a333828ca9583a8", &(0x7f00000025c0), 0x3, 0x34, 0x1, &(0x7f0000002600)}) 12:53:14 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:14 executing program 5: capset(&(0x7f0000000080), &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:14 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{}, {@noextend}]}}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:14 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1) 12:53:28 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2ff68254bdd6ca5ec94658ffcf55ca3909e880f1b5e4cc6006314b96646500c4165149b9439010adbc7f5de6a809559b8ddf291acd8dc847e0e58514419deddceeed153bfa7a859920ac6ec99b2e1ff5299c2fbccbcebcaba4a90f2d5d5fefe90f96a34d39be99b38787039921f1218f00a6320aa4cacf646d5e0aa2940583198736b27a96af9a6eb945e1a70b5d1f4743cf38493b16883e9e30f0146b38d6a06d197e1aa757e267a50d60616910c4230a15e4bb"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) removexattr(&(0x7f0000000000)='\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00') 12:53:28 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:28 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:28 executing program 6: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r0}}]}) getgroups(0x1, &(0x7f0000000000)=[r0]) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:53:28 executing program 5: capset(&(0x7f0000000080), &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 7) 12:53:28 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r6, 0x12) tgkill(0x0, 0x0, 0x2a) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0x200000000a, r3, 0x12) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x1, 0x7, 0xb9, 0x5, 0x7a, 0x61}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2779.697284] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2779.697284] program syz-executor.1 not setting count and/or reply_len properly [ 2779.714799] FAULT_INJECTION: forcing a failure. [ 2779.714799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2779.716516] CPU: 1 UID: 0 PID: 38058 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2779.716553] Tainted: [W]=WARN [ 2779.716560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2779.716573] Call Trace: [ 2779.716581] [ 2779.716601] dump_stack_lvl+0xfa/0x120 [ 2779.716649] should_fail_ex+0x4d7/0x5e0 [ 2779.716683] _copy_from_iter+0x1dc/0x1660 [ 2779.716714] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2779.716742] ? do_raw_spin_lock+0x123/0x260 [ 2779.716774] ? __pfx__copy_from_iter+0x10/0x10 [ 2779.716801] ? irqentry_exit+0x3b/0x90 [ 2779.716833] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2779.716872] copy_page_from_iter+0xe3/0x180 [ 2779.716905] bio_copy_from_iter+0x108/0x270 [ 2779.716951] blk_rq_map_user_iov+0xc07/0x1180 [ 2779.716997] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2779.717037] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2779.717071] ? find_held_lock+0x2b/0x80 [ 2779.717104] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2779.717128] ? lock_release+0xc8/0x290 [ 2779.717151] ? import_ubuf+0x1be/0x220 [ 2779.717181] blk_rq_map_user_io+0x1cf/0x200 [ 2779.717219] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2779.717254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2779.717292] ? irq_work_queue+0x9c/0x100 [ 2779.717324] ? __asan_memset+0x24/0x50 [ 2779.717353] sg_common_write.constprop.0+0xd75/0x1710 [ 2779.717388] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2779.717413] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2779.717444] ? ___ratelimit+0x465/0xa10 [ 2779.717484] sg_write.part.0+0x6a2/0xb50 [ 2779.717509] ? __pfx_sg_write.part.0+0x10/0x10 [ 2779.717537] ? perf_trace_lock+0xb5/0x5d0 [ 2779.717568] ? __pfx_perf_trace_lock+0x10/0x10 [ 2779.717600] ? lock_acquire+0x15e/0x2f0 [ 2779.717626] ? perf_trace_lock+0xb5/0x5d0 [ 2779.717649] ? find_held_lock+0x2b/0x80 [ 2779.717682] ? get_pid_task+0xfd/0x250 [ 2779.717707] ? perf_trace_lock+0xb5/0x5d0 [ 2779.717736] ? avc_policy_seqno+0x9/0x20 [ 2779.717756] ? selinux_file_permission+0x99/0x600 [ 2779.717794] sg_write+0x86/0xe0 [ 2779.717816] vfs_write+0x2b7/0x1150 [ 2779.717839] ? __pfx_sg_write+0x10/0x10 [ 2779.717861] ? lock_acquire+0x15e/0x2f0 [ 2779.717885] ? __fget_files+0x34/0x3b0 [ 2779.717908] ? __pfx_vfs_write+0x10/0x10 [ 2779.717931] ? __fget_files+0x203/0x3b0 [ 2779.717953] ? lock_release+0xc8/0x290 [ 2779.717983] ? __fget_files+0x20d/0x3b0 [ 2779.718016] ksys_write+0x121/0x240 [ 2779.718039] ? __pfx_ksys_write+0x10/0x10 [ 2779.718075] do_syscall_64+0xbf/0x360 [ 2779.718098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2779.718122] RIP: 0033:0x7efff4616b19 [ 2779.718139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2779.718160] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2779.718183] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2779.718199] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2779.718212] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2779.718226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2779.718240] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2779.718273] [ 2779.721959] Invalid option length (1047482) for dns_resolver key 12:53:28 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT=r1, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:29 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x1851c2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0xfffffffffffffffd, 0x581380) r1 = dup2(0xffffffffffffffff, r0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:53:29 executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x10}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000090) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:53:29 executing program 5: capset(&(0x7f0000000080), &(0x7f0000000000)={0x0, 0x1, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:29 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 8) 12:53:29 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2780.037972] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2780.037972] program syz-executor.1 not setting count and/or reply_len properly [ 2780.053854] FAULT_INJECTION: forcing a failure. [ 2780.053854] name failslab, interval 1, probability 0, space 0, times 0 [ 2780.055879] CPU: 1 UID: 0 PID: 38255 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2780.055916] Tainted: [W]=WARN 12:53:29 executing program 5: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2780.055923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2780.055936] Call Trace: [ 2780.055943] [ 2780.055952] dump_stack_lvl+0xfa/0x120 [ 2780.055994] should_fail_ex+0x4d7/0x5e0 [ 2780.056028] should_failslab+0xc2/0x120 [ 2780.056057] __kmalloc_noprof+0xc8/0x6e0 [ 2780.056088] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2780.056122] ? bio_copy_from_iter+0x192/0x270 [ 2780.056156] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2780.056197] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2780.056230] blk_rq_map_user_iov+0x1fd/0x1180 [ 2780.056276] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2780.056315] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2780.056350] ? find_held_lock+0x2b/0x80 [ 2780.056383] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2780.056407] ? lock_release+0xc8/0x290 [ 2780.056430] ? import_ubuf+0x1be/0x220 [ 2780.056461] blk_rq_map_user_io+0x1cf/0x200 [ 2780.056498] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2780.056533] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2780.056573] ? irq_work_queue+0x9c/0x100 [ 2780.056617] ? __asan_memset+0x24/0x50 [ 2780.056651] sg_common_write.constprop.0+0xd75/0x1710 [ 2780.056686] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2780.056711] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2780.056742] ? ___ratelimit+0x465/0xa10 [ 2780.056782] sg_write.part.0+0x6a2/0xb50 [ 2780.056807] ? __pfx_sg_write.part.0+0x10/0x10 [ 2780.056835] ? perf_trace_lock+0xb5/0x5d0 [ 2780.056866] ? __pfx_perf_trace_lock+0x10/0x10 [ 2780.056898] ? lock_acquire+0x15e/0x2f0 [ 2780.056924] ? perf_trace_lock+0xb5/0x5d0 [ 2780.056948] ? find_held_lock+0x2b/0x80 [ 2780.056980] ? get_pid_task+0xfd/0x250 [ 2780.057006] ? perf_trace_lock+0xb5/0x5d0 [ 2780.057035] ? avc_policy_seqno+0x9/0x20 [ 2780.057054] ? selinux_file_permission+0x99/0x600 [ 2780.057092] sg_write+0x86/0xe0 [ 2780.057114] vfs_write+0x2b7/0x1150 [ 2780.057137] ? __pfx_sg_write+0x10/0x10 [ 2780.057159] ? lock_acquire+0x15e/0x2f0 [ 2780.057184] ? __fget_files+0x34/0x3b0 [ 2780.057206] ? __pfx_vfs_write+0x10/0x10 [ 2780.057229] ? __fget_files+0x203/0x3b0 [ 2780.057251] ? lock_release+0xc8/0x290 [ 2780.057281] ? __fget_files+0x20d/0x3b0 [ 2780.057314] ksys_write+0x121/0x240 [ 2780.057337] ? __pfx_ksys_write+0x10/0x10 [ 2780.057372] do_syscall_64+0xbf/0x360 [ 2780.057396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2780.057420] RIP: 0033:0x7efff4616b19 [ 2780.057436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2780.057458] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2780.057480] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2780.057495] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2780.057509] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2780.057523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2780.057536] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2780.057569] 12:53:29 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) umount2(&(0x7f0000001280)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2780.246932] Invalid option length (1047482) for dns_resolver key 12:53:43 executing program 3: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r6, 0x12) tgkill(0x0, 0x0, 0x2a) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0x200000000a, r3, 0x12) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x1, 0x7, 0xb9, 0x5, 0x7a, 0x61}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:43 executing program 5: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:43 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x124) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:43 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:43 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 9) 12:53:43 executing program 0: pipe2(&(0x7f0000001200)={0xffffffffffffffff}, 0x4000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f00000001c0)={{}, 0x0, 0x12, @inherit={0x78, &(0x7f0000000140)={0x0, 0x6, 0x9, 0x80, {0xd, 0x1, 0x80, 0xfffffffffffffff7, 0xffffffff}, [0x6, 0x9, 0x5, 0x3, 0x0, 0x7]}}, @name="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"}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 2794.315821] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2794.315821] program syz-executor.1 not setting count and/or reply_len properly 12:53:43 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2794.361488] Invalid option length (1047482) for dns_resolver key 12:53:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 10) 12:53:43 executing program 5: capset(&(0x7f0000000080)={0x20071026}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:43 executing program 2: r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 12:53:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:43 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') [ 2794.442392] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2794.442392] program syz-executor.1 not setting count and/or reply_len properly [ 2794.447580] FAULT_INJECTION: forcing a failure. [ 2794.447580] name failslab, interval 1, probability 0, space 0, times 0 [ 2794.448796] CPU: 1 UID: 0 PID: 38317 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2794.448816] Tainted: [W]=WARN [ 2794.448820] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2794.448828] Call Trace: [ 2794.448833] [ 2794.448838] dump_stack_lvl+0xfa/0x120 [ 2794.448864] should_fail_ex+0x4d7/0x5e0 [ 2794.448880] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2794.448897] should_failslab+0xc2/0x120 [ 2794.448913] __kmalloc_noprof+0xc8/0x6e0 [ 2794.448930] ? trace_kmalloc+0x1f/0xb0 [ 2794.448944] ? __kmalloc_noprof+0x29d/0x6e0 [ 2794.448961] ? bio_kmalloc+0x3e/0x70 [ 2794.448975] ? bio_copy_from_iter+0x192/0x270 [ 2794.448997] ? bio_kmalloc+0x3e/0x70 [ 2794.449010] bio_kmalloc+0x3e/0x70 [ 2794.449025] blk_rq_map_user_iov+0x390/0x1180 [ 2794.449054] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2794.449079] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2794.449098] ? find_held_lock+0x2b/0x80 [ 2794.449116] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2794.449130] ? lock_release+0xc8/0x290 [ 2794.449143] ? import_ubuf+0x1be/0x220 [ 2794.449160] blk_rq_map_user_io+0x1cf/0x200 [ 2794.449180] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2794.449199] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2794.449221] ? irq_work_queue+0x9c/0x100 [ 2794.449238] ? __asan_memset+0x24/0x50 [ 2794.449253] sg_common_write.constprop.0+0xd75/0x1710 [ 2794.449273] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2794.449286] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2794.449302] ? ___ratelimit+0x465/0xa10 [ 2794.449324] sg_write.part.0+0x6a2/0xb50 [ 2794.449338] ? __pfx_sg_write.part.0+0x10/0x10 [ 2794.449352] ? perf_trace_lock+0xb5/0x5d0 [ 2794.449369] ? __pfx_perf_trace_lock+0x10/0x10 [ 2794.449386] ? lock_acquire+0x15e/0x2f0 [ 2794.449400] ? perf_trace_lock+0xb5/0x5d0 [ 2794.449413] ? find_held_lock+0x2b/0x80 [ 2794.449430] ? get_pid_task+0xfd/0x250 [ 2794.449445] ? perf_trace_lock+0xb5/0x5d0 [ 2794.449461] ? avc_policy_seqno+0x9/0x20 [ 2794.449472] ? selinux_file_permission+0x99/0x600 [ 2794.449492] sg_write+0x86/0xe0 [ 2794.449504] vfs_write+0x2b7/0x1150 [ 2794.449518] ? __pfx_sg_write+0x10/0x10 [ 2794.449529] ? lock_acquire+0x15e/0x2f0 [ 2794.449542] ? __fget_files+0x34/0x3b0 [ 2794.449555] ? __pfx_vfs_write+0x10/0x10 [ 2794.449567] ? __fget_files+0x203/0x3b0 [ 2794.449579] ? lock_release+0xc8/0x290 [ 2794.449595] ? __fget_files+0x20d/0x3b0 [ 2794.449613] ksys_write+0x121/0x240 [ 2794.449626] ? __pfx_ksys_write+0x10/0x10 [ 2794.449645] do_syscall_64+0xbf/0x360 [ 2794.449658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2794.449671] RIP: 0033:0x7efff4616b19 [ 2794.449681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2794.449692] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2794.449705] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2794.449713] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2794.449721] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2794.449728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2794.449735] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2794.449753] [ 2794.487317] Invalid option length (1047482) for dns_resolver key 12:53:43 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 11) 12:53:43 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x0, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2794.652788] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2794.652788] program syz-executor.1 not setting count and/or reply_len properly [ 2794.668522] Invalid option length (1047482) for dns_resolver key 12:53:54 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:53:54 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x200, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:54 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x7ff, 0x3) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x8, 0x0, 0x4, 0x3, 0xff, "88cca3b40dd60af35ed4408ee352ccbe95365e", 0x7, 0x17}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f00000003c0), 0x111000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x88, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@loose}], [{@audit}, {@subj_type}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}]}}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000080)={"e0371d11be789faae48da39c09c89a11", 0x0, 0x0, {0x5, 0x401}, {0x380, 0x200}, 0x6, [0x8, 0x2, 0xffffffff, 0x80000001, 0xbf, 0x8, 0x1, 0x1, 0x1ff, 0x400, 0x60f3, 0xc000000000000, 0x8, 0x10000, 0x223, 0x1]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000180)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f00000001c0)={"01181a670efab5f057ff41ef23ff89c3", r7, r8, {0x9}, {0x8, 0x7}, 0xb0000000000, [0xffffffff, 0x4, 0x3, 0x800, 0x40, 0x800, 0x81, 0x1, 0x6a0a, 0x5, 0x7f, 0x3, 0x96, 0x9, 0x5, 0x800]}) r9 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r9, 0x2202, 0x0) 12:53:54 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) mount(&(0x7f0000000140)=ANY=[@ANYRESHEX=r1, @ANYBLOB="9bd433d3a69f688ef769bf331e65b43d19882cc9171d09112a00c57f1640035be6530f5364696aad154d5e8b53f7424dc3248729a0477e833b66fbed5a14c15051e9ac02914926c0346219ed456759d521ff9cd211c43af8bbae5916979d3a1d9163e287791c6a57863338cf460b16fbd98115962de5ddc72c104edf8d5dbc6d2b70de1aeb48858c50a9d1b97e4f89867490f29a0fdbb5cc002c126607959f8f360a48499999dd952ff1f9b2511c89382cb56734abac283580c1d38a525bcc2fdf7df0e2c59ddb529220d18a65e118cc4f5ac8b1faaea1315c5db9d4ae407b3e8004e882de0a3f26ffa95e7efcc47d235878552b"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='sysv\x00', 0x0, 0x0) 12:53:54 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 12) 12:53:54 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 1) 12:53:54 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) [ 2805.582102] Invalid option length (1047482) for dns_resolver key [ 2805.585610] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2805.585610] program syz-executor.1 not setting count and/or reply_len properly [ 2805.597981] FAULT_INJECTION: forcing a failure. [ 2805.597981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2805.599688] CPU: 1 UID: 0 PID: 38559 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2805.599723] Tainted: [W]=WARN [ 2805.599731] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2805.599744] Call Trace: [ 2805.599752] [ 2805.599760] dump_stack_lvl+0xfa/0x120 [ 2805.599804] should_fail_ex+0x4d7/0x5e0 [ 2805.599837] _copy_from_iter+0x1dc/0x1660 [ 2805.599869] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2805.599896] ? do_raw_spin_lock+0x123/0x260 [ 2805.599929] ? __pfx__copy_from_iter+0x10/0x10 [ 2805.599954] ? find_held_lock+0x2b/0x80 [ 2805.599988] ? __create_object+0x59/0x80 [ 2805.600022] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2805.600054] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2805.600078] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2805.600114] copy_page_from_iter+0xe3/0x180 [ 2805.600147] bio_copy_from_iter+0x108/0x270 [ 2805.600192] blk_rq_map_user_iov+0xc07/0x1180 [ 2805.600239] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2805.600278] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2805.600312] ? find_held_lock+0x2b/0x80 [ 2805.600344] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2805.600369] ? lock_release+0xc8/0x290 [ 2805.600392] ? import_ubuf+0x1be/0x220 [ 2805.600423] blk_rq_map_user_io+0x1cf/0x200 [ 2805.600460] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2805.600496] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2805.600534] ? irq_work_queue+0x9c/0x100 [ 2805.600566] ? __asan_memset+0x24/0x50 [ 2805.600595] sg_common_write.constprop.0+0xd75/0x1710 [ 2805.600630] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2805.600662] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2805.600693] ? ___ratelimit+0x465/0xa10 [ 2805.600733] sg_write.part.0+0x6a2/0xb50 [ 2805.600759] ? __pfx_sg_write.part.0+0x10/0x10 [ 2805.600798] ? perf_trace_lock+0xb5/0x5d0 [ 2805.600830] ? __pfx_perf_trace_lock+0x10/0x10 [ 2805.600861] ? lock_acquire+0x15e/0x2f0 [ 2805.600888] ? perf_trace_lock+0xb5/0x5d0 [ 2805.600912] ? find_held_lock+0x2b/0x80 [ 2805.600944] ? get_pid_task+0xfd/0x250 [ 2805.600969] ? perf_trace_lock+0xb5/0x5d0 [ 2805.600999] ? avc_policy_seqno+0x9/0x20 [ 2805.601019] ? selinux_file_permission+0x99/0x600 [ 2805.601057] sg_write+0x86/0xe0 [ 2805.601079] vfs_write+0x2b7/0x1150 [ 2805.601101] ? __pfx_sg_write+0x10/0x10 [ 2805.601123] ? lock_acquire+0x15e/0x2f0 [ 2805.601147] ? __fget_files+0x34/0x3b0 [ 2805.601169] ? __pfx_vfs_write+0x10/0x10 [ 2805.601192] ? __fget_files+0x203/0x3b0 [ 2805.601213] ? lock_release+0xc8/0x290 [ 2805.601243] ? __fget_files+0x20d/0x3b0 [ 2805.601276] ksys_write+0x121/0x240 [ 2805.601300] ? __pfx_ksys_write+0x10/0x10 [ 2805.601335] do_syscall_64+0xbf/0x360 [ 2805.601358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2805.601382] RIP: 0033:0x7efff4616b19 [ 2805.601399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2805.601421] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2805.601444] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2805.601460] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2805.601473] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2805.601487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2805.601500] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2805.601533] 12:53:54 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:53:54 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 2) 12:53:54 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) dup2(r4, r5) capset(&(0x7f0000000040)={0xf1504, r0}, &(0x7f00000000c0)={0x0, 0x7, 0x2, 0x80000000, 0x19c3d25c, 0x8dc}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f00000001c0)="6051c8921638f3294964d55d95cec00ce5fa71672f0a2e3660c801b03956ad9a5119cf0bb008e6268acbc34c97923db53f673c5327ce4c167171e1b6524c4b3ca8f7914202374618ceb668e0790ace795430f7640a89b7d0a998361011575768fe4380db5b379127afa61961ee1a77642bbff829077589bca0ed08348e8169972e", 0x81}, {&(0x7f0000000300)="0b9f8b069a64bf60272305d04ace5f184fc67c2850249d5b68032e15f1d4216de961a6196b3c643f1039b6a9de9ecec09df657f79311b3bd17253c77b0164a4254e2", 0x42, 0x80}, {&(0x7f0000000380)="14379bf7249a508e71c5d70bc7d84bede1462a557e3152f2b369a29a857f67876a4b910809828f45999ac87e1647cd76e10c5197fe71a46d45db8940ff0152a27600a548b8b7f2abd9e6b437a5da066d226f20f72d7ab0ddc5336def1f8c9b2207f958684b0db931687fefcb876a598c3c8e46f4e8bdd5398d92e3a4b5c2b22fbfd97c34a10602314203", 0x8a, 0x2}, {&(0x7f0000000440)="98f8f807db965182050bd00a93d885bf6705818a67511c394978709929248e6b0ab1d17a76250d0f8a534870eed386ffed09b822fdc5527d9810e8bc0cee253dcb21a44f999f2b3faea88e28e02967ab08798df825be644a2235e14735ee1dd002da4616c0f41e044b7e2b25ae8ae7632edbbd359cc605880bf5b46732bb5ced6c24b964a73fc2c84b10e0e775336ba1186b0a506fca0cde8582b1ffd340fb9051fc4023f08c4e41d1c34d4ac29312012caeaea2befbea0d56cf446b5931f98e320ec1479fb5859f6f7ae79ee2eae06f150cc21c4e93d4f7d0b5248306c0cdc9062ca448c2d2a504ee5c78a39058", 0xee, 0x9e}], 0x2080, &(0x7f00000005c0)={[{@huge_advise}, {@size={'size', 0x3d, [0x36, 0x70, 0x4e, 0x2d]}}, {@mpol={'mpol', 0x3d, {'interleave', '=relative', @void}}}, {@size={'size', 0x3d, [0x65, 0x67, 0x78]}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/sg#\x00'}}, {@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}, {@pcr={'pcr', 0x3d, 0x23}}]}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:53:54 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000300)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000340)={0xa, 0x9, 0x4, 0x0, 0x9, 0xfffffff9}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:53:54 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x3b10c2, 0x0) 12:53:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 13) 12:53:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffb, 0xeb, 0x5b, @scatter={0x0, 0x0, &(0x7f0000000140)}, &(0x7f0000000180)="bed284b09a53f8a92e3aaf6dac028bcd8e3edaef757c7019badbbe7dc2c55711591e87fb1b8cf0e28c6a147edfc446bfb697643cc3c34c5f10c81859024fe7bd46396c9c9354fcb6362394ab47f49496674818449ef5c0c1144e6338707f17c4ebc88fe7019e78c808a70ec17e1998cb9d7b4cca95568fc835e2a014748071ed9a8a31f009cf0f275917d891c2beaeab397d2e6e6df28a85ee57f7b57bc001a427d44dc32e800fc3597d7666322d2c6c06eb63a5d2e440e5ff676afa1370a8ec5056c1c321dacc7b3593ad9c9c1ad96536c5a5fc11a0a46e9911ead4d46362849933c23aa670bab50057c6", &(0x7f0000000280)=""/57, 0x0, 0x1, 0x2, &(0x7f0000000300)}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x1f}}, './file0\x00'}) r6 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) [ 2805.842531] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2805.842531] program syz-executor.1 not setting count and/or reply_len properly [ 2805.845749] FAULT_INJECTION: forcing a failure. [ 2805.845749] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.846609] CPU: 0 UID: 0 PID: 38758 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2805.846634] Tainted: [W]=WARN [ 2805.846638] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2805.846647] Call Trace: [ 2805.846653] [ 2805.846659] dump_stack_lvl+0xfa/0x120 [ 2805.846687] should_fail_ex+0x4d7/0x5e0 [ 2805.846707] should_failslab+0xc2/0x120 [ 2805.846725] __kmalloc_noprof+0xc8/0x6e0 [ 2805.846744] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2805.846764] ? bio_copy_from_iter+0x192/0x270 [ 2805.846783] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2805.846805] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2805.846823] blk_rq_map_user_iov+0x1fd/0x1180 [ 2805.846848] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2805.846870] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2805.846890] ? find_held_lock+0x2b/0x80 [ 2805.846909] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2805.846923] ? lock_release+0xc8/0x290 [ 2805.846936] ? import_ubuf+0x1be/0x220 [ 2805.846953] blk_rq_map_user_io+0x1cf/0x200 [ 2805.846974] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2805.846993] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2805.847015] ? irq_work_queue+0x9c/0x100 [ 2805.847033] ? __asan_memset+0x24/0x50 [ 2805.847049] sg_common_write.constprop.0+0xd75/0x1710 [ 2805.847068] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2805.847081] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2805.847098] ? ___ratelimit+0x465/0xa10 [ 2805.847121] sg_write.part.0+0x6a2/0xb50 [ 2805.847135] ? __pfx_sg_write.part.0+0x10/0x10 [ 2805.847150] ? perf_trace_lock+0xb5/0x5d0 [ 2805.847167] ? __pfx_perf_trace_lock+0x10/0x10 [ 2805.847184] ? lock_acquire+0x15e/0x2f0 [ 2805.847199] ? perf_trace_lock+0xb5/0x5d0 [ 2805.847212] ? find_held_lock+0x2b/0x80 [ 2805.847229] ? get_pid_task+0xfd/0x250 [ 2805.847244] ? perf_trace_lock+0xb5/0x5d0 [ 2805.847260] ? avc_policy_seqno+0x9/0x20 [ 2805.847272] ? selinux_file_permission+0x99/0x600 [ 2805.847293] sg_write+0x86/0xe0 [ 2805.847305] vfs_write+0x2b7/0x1150 [ 2805.847318] ? __pfx_sg_write+0x10/0x10 [ 2805.847330] ? lock_acquire+0x15e/0x2f0 [ 2805.847343] ? __fget_files+0x34/0x3b0 [ 2805.847356] ? __pfx_vfs_write+0x10/0x10 [ 2805.847369] ? __fget_files+0x203/0x3b0 [ 2805.847381] ? lock_release+0xc8/0x290 [ 2805.847397] ? __fget_files+0x20d/0x3b0 [ 2805.847415] ksys_write+0x121/0x240 [ 2805.847428] ? __pfx_ksys_write+0x10/0x10 [ 2805.847447] do_syscall_64+0xbf/0x360 [ 2805.847461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2805.847474] RIP: 0033:0x7efff4616b19 [ 2805.847484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2805.847496] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2805.847508] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2805.847517] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2805.847524] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2805.847532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2805.847539] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2805.847557] 12:54:04 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:04 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x86895aa9e9a4856f}, &(0x7f00000000c0)={0x20, 0x6, 0x5, 0x7, 0x8, 0x2}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:54:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:54:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 14) 12:54:04 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 3) 12:54:04 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x7, 0x38, 0x0, 0x7549b, 0x0) 12:54:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) munlockall() munlockall() [ 2815.839448] FAULT_INJECTION: forcing a failure. [ 2815.839448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2815.840441] CPU: 1 UID: 0 PID: 38893 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2815.840461] Tainted: [W]=WARN [ 2815.840465] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.840472] Call Trace: [ 2815.840477] [ 2815.840482] dump_stack_lvl+0xfa/0x120 [ 2815.840511] should_fail_ex+0x4d7/0x5e0 [ 2815.840531] _copy_from_user+0x30/0xd0 [ 2815.840548] memdup_user+0x7e/0xe0 [ 2815.840562] strndup_user+0x78/0xe0 [ 2815.840574] __x64_sys_mount+0x136/0x300 [ 2815.840590] ? __pfx___x64_sys_mount+0x10/0x10 [ 2815.840610] do_syscall_64+0xbf/0x360 [ 2815.840623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2815.840641] RIP: 0033:0x7f9badc19b19 [ 2815.840650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.840662] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2815.840675] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2815.840683] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2815.840690] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.840697] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000001 [ 2815.840705] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2815.840722] [ 2815.856944] Invalid option length (1047482) for dns_resolver key 12:54:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 4) [ 2815.921546] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2815.921546] program syz-executor.1 not setting count and/or reply_len properly [ 2815.963064] FAULT_INJECTION: forcing a failure. [ 2815.963064] name failslab, interval 1, probability 0, space 0, times 0 [ 2815.964065] CPU: 1 UID: 0 PID: 38990 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2815.964085] Tainted: [W]=WARN [ 2815.964089] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2815.964097] Call Trace: [ 2815.964102] [ 2815.964107] dump_stack_lvl+0xfa/0x120 [ 2815.964133] should_fail_ex+0x4d7/0x5e0 [ 2815.964152] ? getname_flags.part.0+0x48/0x540 [ 2815.964170] should_failslab+0xc2/0x120 [ 2815.964187] kmem_cache_alloc_noprof+0x72/0x690 [ 2815.964201] ? lock_release+0xc8/0x290 [ 2815.964220] ? getname_flags.part.0+0x48/0x540 [ 2815.964236] getname_flags.part.0+0x48/0x540 [ 2815.964255] getname_flags+0x95/0xe0 [ 2815.964268] user_path_at+0x27/0x90 [ 2815.964281] __x64_sys_mount+0x1e9/0x300 [ 2815.964296] ? __pfx___x64_sys_mount+0x10/0x10 [ 2815.964316] do_syscall_64+0xbf/0x360 [ 2815.964330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2815.964343] RIP: 0033:0x7f9badc19b19 [ 2815.964352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2815.964364] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2815.964377] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2815.964385] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2815.964393] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2815.964400] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000001 [ 2815.964407] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2815.964425] 12:54:05 executing program 7: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:05 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:05 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r3, r2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r6, r5, 0x0) mount$9p_tcp(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1084804, &(0x7f0000000200)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@debug={'debug', 0x3d, 0x4}}, {@cache_mmap}, {@afid={'afid', 0x3d, 0x5}}, {@version_9p2000}, {@access_user}], [{@fscontext={'fscontext', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@appraise_type}, {@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'debugfs\x00'}}, {@appraise}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@euid_gt={'euid>', r5}}]}}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x8000, 0xffffffe0) 12:54:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 5) 12:54:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 15) 12:54:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', '{/*/-\"\x00'}, &(0x7f0000000180)='debugfs\x00', 0x8, 0x2) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:54:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) munlockall() munlockall() [ 2816.175453] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2816.175453] program syz-executor.1 not setting count and/or reply_len properly [ 2816.189629] FAULT_INJECTION: forcing a failure. [ 2816.189629] name failslab, interval 1, probability 0, space 0, times 0 [ 2816.190581] CPU: 1 UID: 0 PID: 39224 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2816.190601] Tainted: [W]=WARN [ 2816.190605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2816.190613] Call Trace: [ 2816.190618] [ 2816.190623] dump_stack_lvl+0xfa/0x120 [ 2816.190653] should_fail_ex+0x4d7/0x5e0 [ 2816.190669] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2816.190687] should_failslab+0xc2/0x120 [ 2816.190704] __kmalloc_noprof+0xc8/0x6e0 [ 2816.190722] ? trace_kmalloc+0x1f/0xb0 [ 2816.190736] ? __kmalloc_noprof+0x29d/0x6e0 [ 2816.190753] ? bio_kmalloc+0x3e/0x70 [ 2816.190767] ? bio_copy_from_iter+0x192/0x270 [ 2816.190790] ? bio_kmalloc+0x3e/0x70 [ 2816.190803] bio_kmalloc+0x3e/0x70 [ 2816.190818] blk_rq_map_user_iov+0x390/0x1180 [ 2816.190844] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2816.190865] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2816.190885] ? find_held_lock+0x2b/0x80 [ 2816.190903] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2816.190917] ? lock_release+0xc8/0x290 [ 2816.190930] ? import_ubuf+0x1be/0x220 [ 2816.190948] blk_rq_map_user_io+0x1cf/0x200 [ 2816.190968] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2816.190987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2816.191009] ? irq_work_queue+0x9c/0x100 [ 2816.191027] ? __asan_memset+0x24/0x50 [ 2816.191042] sg_common_write.constprop.0+0xd75/0x1710 [ 2816.191061] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2816.191075] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2816.191091] ? ___ratelimit+0x465/0xa10 [ 2816.191114] sg_write.part.0+0x6a2/0xb50 [ 2816.191128] ? __pfx_sg_write.part.0+0x10/0x10 [ 2816.191145] ? perf_trace_lock+0xb5/0x5d0 [ 2816.191164] ? __pfx_perf_trace_lock+0x10/0x10 [ 2816.191182] ? lock_acquire+0x15e/0x2f0 [ 2816.191196] ? perf_trace_lock+0xb5/0x5d0 [ 2816.191209] ? find_held_lock+0x2b/0x80 [ 2816.191227] ? get_pid_task+0xfd/0x250 [ 2816.191241] ? perf_trace_lock+0xb5/0x5d0 [ 2816.191257] ? avc_policy_seqno+0x9/0x20 [ 2816.191268] ? selinux_file_permission+0x99/0x600 [ 2816.191289] sg_write+0x86/0xe0 [ 2816.191301] vfs_write+0x2b7/0x1150 [ 2816.191315] ? __pfx_sg_write+0x10/0x10 [ 2816.191327] ? lock_acquire+0x15e/0x2f0 [ 2816.191340] ? __fget_files+0x34/0x3b0 [ 2816.191353] ? __pfx_vfs_write+0x10/0x10 [ 2816.191365] ? __fget_files+0x203/0x3b0 [ 2816.191377] ? lock_release+0xc8/0x290 [ 2816.191393] ? __fget_files+0x20d/0x3b0 [ 2816.191411] ksys_write+0x121/0x240 [ 2816.191424] ? __pfx_ksys_write+0x10/0x10 [ 2816.191443] do_syscall_64+0xbf/0x360 [ 2816.191456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2816.191469] RIP: 0033:0x7efff4616b19 [ 2816.191478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2816.191491] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2816.191503] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2816.191512] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2816.191519] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2816.191526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2816.191534] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2816.191551] [ 2816.237358] Invalid option length (1047482) for dns_resolver key 12:54:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, 0x0, 0x0}, 0x58) munlockall() munlockall() 12:54:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file1\x00', &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x2000000, &(0x7f00000001c0)='\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:54:16 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 6) 12:54:16 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=bd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00']) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) dup2(r3, r5) 12:54:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:16 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x101400a, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:54:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 16) 12:54:16 executing program 7: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2827.315572] 9pnet: Could not find request transport: bd 12:54:16 executing program 7: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:16 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x58) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:54:16 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2827.383420] FAULT_INJECTION: forcing a failure. [ 2827.383420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2827.385282] CPU: 1 UID: 0 PID: 39348 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2827.385320] Tainted: [W]=WARN [ 2827.385328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2827.385342] Call Trace: [ 2827.385351] [ 2827.385361] dump_stack_lvl+0xfa/0x120 [ 2827.385405] should_fail_ex+0x4d7/0x5e0 [ 2827.385441] strncpy_from_user+0x3b/0x2f0 [ 2827.385484] getname_flags.part.0+0x8d/0x540 [ 2827.385523] getname_flags+0x95/0xe0 [ 2827.385549] user_path_at+0x27/0x90 [ 2827.385574] __x64_sys_mount+0x1e9/0x300 [ 2827.385604] ? __pfx___x64_sys_mount+0x10/0x10 [ 2827.385651] do_syscall_64+0xbf/0x360 [ 2827.385678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2827.385703] RIP: 0033:0x7f9badc19b19 [ 2827.385721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2827.385744] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2827.385769] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2827.385785] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2827.385800] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2827.385814] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000001 [ 2827.385829] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2827.385864] [ 2827.406457] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2827.406457] program syz-executor.1 not setting count and/or reply_len properly [ 2827.409975] Invalid option length (1047482) for dns_resolver key 12:54:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:16 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1800000, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mount_setattr(r1, &(0x7f0000000180)='./file0\x00', 0x400, &(0x7f00000001c0)={0x1, 0x4, 0x180000}, 0x20) 12:54:16 executing program 7: capset(0x0, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 17) 12:54:26 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000140)=""/198) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x45, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='jfs\x00', 0xc00, 0x0) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/105, 0x69) 12:54:26 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 7) 12:54:26 executing program 7: capset(0x0, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:26 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x80000001, 0x1}) 12:54:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:54:26 executing program 2: alarm(0x0) capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x22, 0x200000}) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x8, 0x2, 0x6, 0x1000, 0x5, 0x7}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r1}}]}) lchown(&(0x7f0000000240)='./file0\x00', 0xffffffffffffffff, r1) accept$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000300)=0x6e) umount2(&(0x7f0000001280)='./file0\x00', 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) capset(&(0x7f0000000140)={0x0, r0}, &(0x7f0000000180)={0x3f, 0x1ed9, 0x4, 0x80800, 0x0, 0x7ff}) [ 2837.566141] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2837.566141] program syz-executor.1 not setting count and/or reply_len properly [ 2837.577695] FAULT_INJECTION: forcing a failure. [ 2837.577695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2837.578660] CPU: 1 UID: 0 PID: 39482 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2837.578679] Tainted: [W]=WARN [ 2837.578683] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2837.578690] Call Trace: [ 2837.578695] [ 2837.578700] dump_stack_lvl+0xfa/0x120 [ 2837.578726] should_fail_ex+0x4d7/0x5e0 [ 2837.578746] _copy_from_iter+0x1dc/0x1660 [ 2837.578764] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2837.578779] ? do_raw_spin_lock+0x123/0x260 [ 2837.578798] ? __pfx__copy_from_iter+0x10/0x10 [ 2837.578812] ? find_held_lock+0x2b/0x80 [ 2837.578830] ? __create_object+0x59/0x80 [ 2837.578850] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2837.578868] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2837.578881] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2837.578900] copy_page_from_iter+0xe3/0x180 [ 2837.578918] bio_copy_from_iter+0x108/0x270 [ 2837.578944] blk_rq_map_user_iov+0xc07/0x1180 [ 2837.578969] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2837.578990] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2837.579008] ? find_held_lock+0x2b/0x80 [ 2837.579026] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2837.579040] ? lock_release+0xc8/0x290 [ 2837.579053] ? import_ubuf+0x1be/0x220 [ 2837.579069] blk_rq_map_user_io+0x1cf/0x200 [ 2837.579089] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2837.579108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2837.579129] ? irq_work_queue+0x9c/0x100 [ 2837.579146] ? __asan_memset+0x24/0x50 [ 2837.579162] sg_common_write.constprop.0+0xd75/0x1710 [ 2837.579181] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2837.579194] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2837.579211] ? ___ratelimit+0x465/0xa10 [ 2837.579232] sg_write.part.0+0x6a2/0xb50 [ 2837.579246] ? __pfx_sg_write.part.0+0x10/0x10 [ 2837.579261] ? perf_trace_lock+0xb5/0x5d0 [ 2837.579277] ? __pfx_perf_trace_lock+0x10/0x10 [ 2837.579294] ? lock_acquire+0x15e/0x2f0 [ 2837.579308] ? perf_trace_lock+0xb5/0x5d0 [ 2837.579322] ? find_held_lock+0x2b/0x80 [ 2837.579339] ? get_pid_task+0xfd/0x250 [ 2837.579353] ? perf_trace_lock+0xb5/0x5d0 [ 2837.579369] ? avc_policy_seqno+0x9/0x20 [ 2837.579380] ? selinux_file_permission+0x99/0x600 [ 2837.579401] sg_write+0x86/0xe0 [ 2837.579413] vfs_write+0x2b7/0x1150 [ 2837.579425] ? __pfx_sg_write+0x10/0x10 [ 2837.579437] ? lock_acquire+0x15e/0x2f0 [ 2837.579450] ? __fget_files+0x34/0x3b0 [ 2837.579463] ? __pfx_vfs_write+0x10/0x10 [ 2837.579475] ? __fget_files+0x203/0x3b0 [ 2837.579486] ? lock_release+0xc8/0x290 [ 2837.579503] ? __fget_files+0x20d/0x3b0 [ 2837.579520] ksys_write+0x121/0x240 [ 2837.579533] ? __pfx_ksys_write+0x10/0x10 [ 2837.579552] do_syscall_64+0xbf/0x360 [ 2837.579565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.579579] RIP: 0033:0x7efff4616b19 [ 2837.579588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2837.579601] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2837.579613] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2837.579622] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2837.579634] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.579641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2837.579648] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2837.579666] [ 2837.633675] FAULT_INJECTION: forcing a failure. [ 2837.633675] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.635352] CPU: 0 UID: 0 PID: 39488 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2837.635388] Tainted: [W]=WARN [ 2837.635396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2837.635409] Call Trace: [ 2837.635417] [ 2837.635427] dump_stack_lvl+0xfa/0x120 [ 2837.635470] should_fail_ex+0x4d7/0x5e0 [ 2837.635504] should_failslab+0xc2/0x120 [ 2837.635534] __kmalloc_cache_noprof+0x73/0x690 [ 2837.635568] ? find_held_lock+0x2b/0x80 [ 2837.635603] ? __get_fs_type+0xe6/0x160 [ 2837.635629] ? alloc_fs_context+0x58/0x9e0 [ 2837.635665] ? alloc_fs_context+0x58/0x9e0 [ 2837.635683] ? _raw_read_unlock+0x1e/0x40 [ 2837.635714] alloc_fs_context+0x58/0x9e0 [ 2837.635744] path_mount+0xac7/0x1dd0 [ 2837.635771] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2837.635799] ? __pfx_path_mount+0x10/0x10 [ 2837.635824] ? kmem_cache_free+0x2a1/0x540 [ 2837.635845] ? putname.part.0+0x11b/0x160 [ 2837.635878] ? getname_flags.part.0+0x1c6/0x540 [ 2837.635913] ? putname.part.0+0x11b/0x160 [ 2837.635948] __x64_sys_mount+0x27b/0x300 [ 2837.635975] ? __pfx___x64_sys_mount+0x10/0x10 [ 2837.636013] do_syscall_64+0xbf/0x360 [ 2837.636037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.636060] RIP: 0033:0x7f9badc19b19 [ 2837.636078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2837.636100] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2837.636123] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2837.636138] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2837.636152] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 12:54:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) [ 2837.636165] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000001 [ 2837.636179] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2837.636212] [ 2837.682180] Invalid option length (1047482) for dns_resolver key 12:54:26 executing program 7: capset(0x0, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x800) r2 = dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$RTC_EPOCH_READ(r4, 0x8008700d, &(0x7f0000000000)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)={0xac, 0x5, 0x6, "b98b199f3a97650b3b3c139455a7809ef83fa8467d54b7a91e85749ddb9466e4a38c8abd0c1abf578cbf0e26e299bdc9c51ce3d14211d84322cb115733cdb186ab17f4a3f6a9d01bbd8b807c8b5ac638d3ad4d421f995851e45fa021e0d55fcecede8102ef56cfd1ca2c81d12ac00a2985f1778a862f07af82f79028fbcab6f5ba9ce7128aa651eede44a745a888bebd887034a9f2c7464478816c5b1560f58ca039dddd3fdc286b5ecac475"}) 12:54:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 18) [ 2837.789516] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:54:27 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 8) 12:54:27 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) (fail_nth: 1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:54:27 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f00000000c0), &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:27 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x202, 0x21) recvmmsg$unix(r0, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/253, 0xfd}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/70, 0x46}, {&(0x7f0000000400)=""/132, 0x84}, {&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x7}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f00000016c0)=""/172, 0xac}, {&(0x7f0000001780)=""/153, 0x99}, {&(0x7f0000001840)=""/187, 0xbb}], 0x3}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002a00)=[{&(0x7f00000019c0)=""/52, 0x34}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x2, &(0x7f0000002a40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002a80)=@abs, 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002b00)=""/6, 0x6}, {&(0x7f0000002b40)=""/189, 0xbd}], 0x2}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000002cc0)=""/12, 0xc}], 0x1, &(0x7f0000002d40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000002e40)=@abs, 0x6e, &(0x7f0000003400)=[{&(0x7f0000002ec0)=""/243, 0xf3}, {&(0x7f0000002fc0)=""/235, 0xeb}, {&(0x7f00000030c0)=""/25, 0x19}, {&(0x7f0000003100)=""/120, 0x78}, {&(0x7f0000003180)=""/183, 0xb7}, {&(0x7f0000003240)=""/240, 0xf0}, {&(0x7f0000003340)=""/182, 0xb6}], 0x7, &(0x7f0000003480)}}, {{&(0x7f0000003500), 0x6e, &(0x7f0000003680)=[{&(0x7f0000003580)=""/62, 0x3e}, {&(0x7f00000035c0)=""/175, 0xaf}], 0x2, &(0x7f00000036c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f00000037c0)=@abs, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000003840)=""/113, 0x71}, {&(0x7f00000038c0)=""/77, 0x4d}, {&(0x7f0000003940)=""/14, 0xe}, {&(0x7f0000003980)=""/157, 0x9d}, {&(0x7f0000003a40)=""/74, 0x4a}, {&(0x7f0000003ac0)=""/208, 0xd0}, {&(0x7f0000003bc0)=""/15, 0xf}], 0x7, &(0x7f0000003c80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}}], 0x8, 0x40000020, 0x0) [ 2837.895834] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2837.895834] program syz-executor.1 not setting count and/or reply_len properly [ 2837.906495] FAULT_INJECTION: forcing a failure. [ 2837.906495] name failslab, interval 1, probability 0, space 0, times 0 [ 2837.908432] CPU: 0 UID: 0 PID: 39580 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2837.908470] Tainted: [W]=WARN [ 2837.908477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2837.908491] Call Trace: [ 2837.908498] [ 2837.908507] dump_stack_lvl+0xfa/0x120 [ 2837.908549] should_fail_ex+0x4d7/0x5e0 [ 2837.908581] should_failslab+0xc2/0x120 [ 2837.908609] __kmalloc_noprof+0xc8/0x6e0 [ 2837.908649] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2837.908682] ? bio_copy_from_iter+0x192/0x270 [ 2837.908717] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2837.908758] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2837.908790] blk_rq_map_user_iov+0x1fd/0x1180 [ 2837.908837] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2837.908876] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2837.908911] ? find_held_lock+0x2b/0x80 [ 2837.908944] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2837.908968] ? lock_release+0xc8/0x290 [ 2837.909003] ? import_ubuf+0x1be/0x220 [ 2837.909034] blk_rq_map_user_io+0x1cf/0x200 [ 2837.909072] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2837.909107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2837.909146] ? irq_work_queue+0x9c/0x100 [ 2837.909177] ? __asan_memset+0x24/0x50 [ 2837.909206] sg_common_write.constprop.0+0xd75/0x1710 [ 2837.909240] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2837.909265] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2837.909296] ? ___ratelimit+0x465/0xa10 [ 2837.909336] sg_write.part.0+0x6a2/0xb50 [ 2837.909361] ? __pfx_sg_write.part.0+0x10/0x10 [ 2837.909388] ? perf_trace_lock+0xb5/0x5d0 [ 2837.909420] ? __pfx_perf_trace_lock+0x10/0x10 [ 2837.909451] ? lock_acquire+0x15e/0x2f0 [ 2837.909477] ? perf_trace_lock+0xb5/0x5d0 [ 2837.909501] ? find_held_lock+0x2b/0x80 [ 2837.909533] ? get_pid_task+0xfd/0x250 [ 2837.909558] ? perf_trace_lock+0xb5/0x5d0 [ 2837.909587] ? avc_policy_seqno+0x9/0x20 [ 2837.909607] ? selinux_file_permission+0x99/0x600 [ 2837.909645] sg_write+0x86/0xe0 [ 2837.909667] vfs_write+0x2b7/0x1150 [ 2837.909690] ? __pfx_sg_write+0x10/0x10 [ 2837.909712] ? lock_acquire+0x15e/0x2f0 [ 2837.909737] ? __fget_files+0x34/0x3b0 [ 2837.909759] ? __pfx_vfs_write+0x10/0x10 [ 2837.909783] ? __fget_files+0x203/0x3b0 [ 2837.909804] ? lock_release+0xc8/0x290 [ 2837.909834] ? __fget_files+0x20d/0x3b0 [ 2837.909867] ksys_write+0x121/0x240 [ 2837.909891] ? __pfx_ksys_write+0x10/0x10 [ 2837.909926] do_syscall_64+0xbf/0x360 [ 2837.909950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2837.909973] RIP: 0033:0x7efff4616b19 [ 2837.909990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2837.910011] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2837.910034] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2837.910050] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2837.910063] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2837.910077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2837.910093] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2837.910127] [ 2837.979092] Invalid option length (1047482) for dns_resolver key 12:54:27 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 9) 12:54:27 executing program 0: ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000340)={0xffffffffffffffff, 0x3, 0x4, 0xa380}) flistxattr(r0, &(0x7f0000000380)=""/74, 0x4a) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='vxfs\x00', 0x2, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240)={'L+', 0x6}, 0x16, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f646576de4f692c1a89685c"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hfs\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@md5={0x1, "e3cc68f50071461c9bd2e1e7236554b8"}, 0x11, 0x2) 12:54:27 executing program 7: capset(&(0x7f0000000080), &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2838.026685] FAULT_INJECTION: forcing a failure. [ 2838.026685] name failslab, interval 1, probability 0, space 0, times 0 [ 2838.028597] CPU: 0 UID: 0 PID: 39685 Comm: syz-executor.4 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2838.028639] Tainted: [W]=WARN [ 2838.028647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2838.028660] Call Trace: [ 2838.028667] [ 2838.028676] dump_stack_lvl+0xfa/0x120 [ 2838.028717] should_fail_ex+0x4d7/0x5e0 [ 2838.028749] ? getname_flags.part.0+0x48/0x540 [ 2838.028781] should_failslab+0xc2/0x120 [ 2838.028809] kmem_cache_alloc_noprof+0x72/0x690 [ 2838.028843] ? getname_flags.part.0+0x48/0x540 [ 2838.028874] getname_flags.part.0+0x48/0x540 [ 2838.028909] getname_flags+0x95/0xe0 [ 2838.028933] __x64_sys_mkdirat+0x77/0xb0 [ 2838.028958] do_syscall_64+0xbf/0x360 [ 2838.028982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2838.029017] RIP: 0033:0x7ff2cd82db19 [ 2838.029035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.029056] RSP: 002b:00007ff2cada3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 2838.029078] RAX: ffffffffffffffda RBX: 00007ff2cd940f60 RCX: 00007ff2cd82db19 [ 2838.029093] RDX: 00000000000001ff RSI: 0000000020000400 RDI: ffffffffffffff9c [ 2838.029107] RBP: 00007ff2cada31d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.029120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2838.029133] R13: 00007fff16af541f R14: 00007ff2cada3300 R15: 0000000000022000 [ 2838.029166] 12:54:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x4, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2838.085541] FAULT_INJECTION: forcing a failure. [ 2838.085541] name failslab, interval 1, probability 0, space 0, times 0 [ 2838.086587] CPU: 1 UID: 0 PID: 39716 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2838.086608] Tainted: [W]=WARN [ 2838.086612] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2838.086621] Call Trace: [ 2838.086625] [ 2838.086634] dump_stack_lvl+0xfa/0x120 [ 2838.086661] should_fail_ex+0x4d7/0x5e0 [ 2838.086685] should_failslab+0xc2/0x120 [ 2838.086702] __kmalloc_cache_noprof+0x73/0x690 [ 2838.086722] ? trace_kmalloc+0x1f/0xb0 [ 2838.086736] ? __kmalloc_cache_noprof+0x26f/0x690 [ 2838.086754] ? debugfs_init_fs_context+0x45/0x110 [ 2838.086771] ? debugfs_init_fs_context+0x45/0x110 [ 2838.086783] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2838.086799] debugfs_init_fs_context+0x45/0x110 [ 2838.086811] ? __pfx_debugfs_init_fs_context+0x10/0x10 [ 2838.086824] alloc_fs_context+0x570/0x9e0 [ 2838.086841] path_mount+0xac7/0x1dd0 [ 2838.086857] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2838.086872] ? __pfx_path_mount+0x10/0x10 [ 2838.086886] ? kmem_cache_free+0x2a1/0x540 [ 2838.086897] ? putname.part.0+0x11b/0x160 [ 2838.086915] ? getname_flags.part.0+0x1c6/0x540 [ 2838.086934] ? putname.part.0+0x11b/0x160 [ 2838.086953] __x64_sys_mount+0x27b/0x300 [ 2838.086967] ? __pfx___x64_sys_mount+0x10/0x10 [ 2838.086987] do_syscall_64+0xbf/0x360 [ 2838.087001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2838.087014] RIP: 0033:0x7f9badc19b19 [ 2838.087024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2838.087037] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2838.087049] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2838.087058] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2838.087065] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2838.087073] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000001 [ 2838.087080] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2838.087098] 12:54:27 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 19) 12:54:37 executing program 0: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000005c0)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/252, 0xfc}, {&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f0000000340)=""/246, 0xf6}, {}], 0x4, &(0x7f0000000480)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x110}}], 0x1, 0x1, &(0x7f0000000600)={0x0, 0x3938700}) ioctl$CDROMREADRAW(r0, 0x5314, &(0x7f0000000640)={0x6, 0x7f, 0x1, 0xf0, 0x81, 0xff}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:54:37 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xdc74) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) 12:54:37 executing program 7: capset(&(0x7f0000000080), &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:37 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0xeac, 0x0, 0x7fff, 0x3f, 0xfffffffe, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:54:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:54:37 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 10) 12:54:38 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 11) 12:54:38 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x2a0c800, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/172, 0xac) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001c3da16afe067b415cab6e31900000018000060", @ANYRES32=r0, @ANYBLOB="bf000000000000002e2f66696c653000"]) [ 2848.832174] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2848.832174] program syz-executor.1 not setting count and/or reply_len properly 12:54:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000004c0)='.log\x00', 0xf8ccc876912c4a3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = eventfd(0x0) io_submit(0x0, 0x6, &(0x7f0000000780)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x3, 0xffffffffffffffff, &(0x7f00000000c0)="8d583ebe920ce4419aa623d1ad5812318140f828c3e2349dd34bc03d6256bb4fdc21e4046baf05dd0edccfc84acad81b8fe451b382cd476884a04876fa61d2e0f75e56cf6a29ad78fc78ced577fbb8ecb31f7100215b2a0e7d5a33fb0879e4be0620c142fb66806db453a803be5046740ee40955a80da8dfcf188c94ec8a7a0571d6e707f4c90e0259b256c37c731aa7c9314e39a61e9789e9f4cadc66f8e16ef25ad9b10235ff9748dde001d6fab1cd5be84ebcb0b07d4d13ade856032fb358ae312444cd4c2294c670754bf50d3f3e", 0xd0, 0x100000000, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x2, 0x8e, 0xffffffffffffffff, &(0x7f0000000200)="83d0c1cab04258cfd57d36965897ef772fcbab2d73888ea25cfd174f643f97e00f3d2f20608f55399760f06a4619464d9b7f5970d6b479de523b312a8e1a5ce1feeb60586b7846", 0x47, 0x101, 0x0, 0x2}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xb74, 0xffffffffffffffff, &(0x7f0000000300)="ad00f563e1513ace6abd060f8cf17b7cfb5c29e6be05a2671bee27160c97d651b53f7ebf04a8d13c0e59aa7626fddc282bbcd636fc8bc6582a7b80944e8509b5c67588383a63a0479c08a358a9a2b7d002610d", 0x53, 0x0, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x803, r1, &(0x7f00000003c0)="ec45f2ce7d86aa9616cf69cb409786f5d4b7ddd7d194b6e91e729f5eadcb00862f83991d29dc870344cee239b834e14083d53f0077832710bb81be34ce6d45564bb13280b13accadf9cd50af140b01b9abc789cb224fc6022767311995568f64f181db93541fde161b065ddd3aaa3c31c5679fa922a8a0f69d0699840c0adc8ecae6c65e95eaebcd5d9e439768bedf8d58bd083677549695c3f7621ee353f7e546ac84fc0b147450e1000fd9a00288970e02a8d962bdd96d53e7a2aedf3b0bac5402dc851f390058ae964b0b680d0144996864c811206ebd486d96f868a699c84ea98117cae239eb47292470cfd7", 0xee, 0x3, 0x0, 0x3, r3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f0000000540)="01f851b3837081b56d8f92b30c2634242a5d9d92994723244cd147d2548cf2b280c876dc58c437dad7ddc9d15f784b34c60ab5844249a98572b79d06d27ffa563e0ce0a048a027f418749795b231305fe1f093cffc6791e648ae11f0627318dc05e8c773628ce19e45d766bf9cf785c254d31f8a4e7885e73df466ba5c63d8c1bafed309af50f42b377c1aedb517dd33b56face2c1e426c114fdce38c1ce08ceed630c6473716bcb6a391688b5b44f016913f8c6f9ae56ecb1c777a2b394c1af7fe74794238d56085f485e30b5e85abb94ec82a0", 0xd4, 0x4, 0x0, 0x3}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x3, 0x8, r7, &(0x7f00000007c0)="6aa1c659833c3238610a7c7c70fcfca167581bc8d71b8123dbbd6c2630b9da7cf8b30d6b93c5d192b4f97600f627607ee5e18b4cf1c90f511355e5968779d1a55e3b6b7cc32aa4a779194bc63a02397dcf5485ddcaf108950e2fcd0f798ec40a438c2525bb0270d66841f0d9b48c9c24b7f1360413030c564326a8c6069069897f3e43b0e00ace43ba5102e684ac5cdd488b343992ca29c47a9648f43488d1577279e634bf71fbced7ba85f1db0e616bb69388c9", 0xb4, 0x2, 0x0, 0x0, r8}]) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$FIGETBSZ(r10, 0x2, &(0x7f0000000080)) r11 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r12 = dup2(r11, r9) ioctl$SG_GET_TIMEOUT(r12, 0x2202, 0x0) [ 2848.880669] Invalid option length (1047482) for dns_resolver key [ 2848.917436] FAULT_INJECTION: forcing a failure. [ 2848.917436] name failslab, interval 1, probability 0, space 0, times 0 [ 2848.919361] CPU: 0 UID: 0 PID: 39880 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2848.919422] Tainted: [W]=WARN [ 2848.919434] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2848.919456] Call Trace: [ 2848.919468] [ 2848.919482] dump_stack_lvl+0xfa/0x120 [ 2848.919549] should_fail_ex+0x4d7/0x5e0 [ 2848.919582] ? alloc_vfsmnt+0x23/0x6e0 [ 2848.919610] should_failslab+0xc2/0x120 [ 2848.919662] kmem_cache_alloc_noprof+0x72/0x690 [ 2848.919704] ? find_held_lock+0x2b/0x80 [ 2848.919752] ? alloc_vfsmnt+0x23/0x6e0 [ 2848.919779] alloc_vfsmnt+0x23/0x6e0 [ 2848.919810] vfs_create_mount.part.0+0x40/0x440 [ 2848.919846] path_mount+0x1637/0x1dd0 [ 2848.919874] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2848.919902] ? __pfx_path_mount+0x10/0x10 [ 2848.919930] ? putname.part.0+0x11b/0x160 [ 2848.919968] ? putname.part.0+0x11b/0x160 [ 2848.920003] __x64_sys_mount+0x27b/0x300 [ 2848.920030] ? __pfx___x64_sys_mount+0x10/0x10 [ 2848.920068] do_syscall_64+0xbf/0x360 [ 2848.920092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2848.920115] RIP: 0033:0x7f9badc19b19 [ 2848.920133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2848.920154] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2848.920177] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2848.920192] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2848.920206] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2848.920219] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 2848.920233] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2848.920265] 12:54:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x10, 0x70bd2d, 0x28, {{}, {@void, @val={0xc, 0x99, {0x2, 0x52}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x210000, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 20) 12:54:49 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000140)=@md5={0x1, "d828fafd8504f376e3b5572804d209f6"}, 0x11, 0x3) 12:54:49 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) uname(&(0x7f00000001c0)=""/3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x96df, 0x4, &(0x7f0000001700)=[{&(0x7f00000004c0)="c6d281bcf82b0d39493902caa21c9895216bea0e9d1a5d8a63346d0ee0f9225b15afa51341ce97e25cf8d27b540cf838017d10f81396d4cd537e9619131042a22c364bc2a6e2d6321ad93a5edbc5e92991726424da4e2718b62388fb3804c9f13b5cd4a94b1d3a81cdb020ff56cc7e7e960484dd3c3c91c2972c452133953b71e9390c792e7df2ce26a6e8fd97ea38e19e799bdedceec4020d763a2cd018b6125d9b59fc98fd9d8bcb2483ddb98d25b5d13d335c5afbdfae11", 0xb9, 0x3c9f}, {&(0x7f0000000580)="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", 0x1000, 0x8469}, {&(0x7f0000001580)="1ba527e229483f7cf72b5320ce4f6d2484ac3d339140efd23e47dc610c7cb5aaa9ec95821aa6a80a2ad7989b48af78123a4ef781f707cfc94323311bbd7c1722e7c187f982b7a7d99380c36bde6bbfb5aa92a3ab039d3e64d6f51e3d161dacb08808709d7329bc56005ca57242c3bf98b3823f662c9f5eb6a425e651de2fce579742ccc2c51a2b31d02d41adb41be5d19cdac344d4ae9b3860671edbb267403d117792b135ab", 0xa6, 0x8}, {&(0x7f0000001640)="d125b98d4e1e939691a7dda741d84ac21d690c456ce6c07a7546bfc0004272d36a402daf174d3467ed97074998f3f303346e8a414101af7ec6802934416cfb9aee655840c1a35bc880100924c798883fea9d8443cac26be3139d8ec642700a4f7733232e3d6df555a54bc4069adca53b71f7ae77110a85797016e948ec5562f4e990c19aec49d69ef8d65711a8540f32f8dcf334e43110acd131e01858298999445b85c6f122efe46f9389e9c9b2c01e1df5", 0xb2, 0x9}], 0x8, &(0x7f00000003c0)={[{@utf8no}, {@utf8no}], [{@fsname={'fsname', 0x3d, 'dns_resolver\x00'}}, {@obj_role={'obj_role', 0x3d, 'dns_resolver\x00'}}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x86f90000) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:54:49 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = gettid() capset(&(0x7f0000000080)={0x20071026, r2}, &(0x7f0000000000)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r5 = dup2(r4, r3) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r2, 0xa, r5, 0x12) capset(&(0x7f0000000140)={0x20071026, r2}, &(0x7f0000000180)={0x54, 0x4, 0x4, 0x6, 0xb9, 0x400}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r6) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="140600000001967cfae2fe6460001b0000000010"], 0x14}}, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:54:49 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 12) 12:54:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) [ 2860.110977] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2860.110977] program syz-executor.1 not setting count and/or reply_len properly [ 2860.115453] FAULT_INJECTION: forcing a failure. [ 2860.115453] name failslab, interval 1, probability 0, space 0, times 0 [ 2860.116371] CPU: 1 UID: 0 PID: 40180 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2860.116391] Tainted: [W]=WARN [ 2860.116395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.116403] Call Trace: [ 2860.116407] [ 2860.116413] dump_stack_lvl+0xfa/0x120 [ 2860.116440] should_fail_ex+0x4d7/0x5e0 [ 2860.116457] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2860.116474] should_failslab+0xc2/0x120 [ 2860.116490] __kmalloc_noprof+0xc8/0x6e0 [ 2860.116508] ? trace_kmalloc+0x1f/0xb0 [ 2860.116522] ? __kmalloc_noprof+0x29d/0x6e0 [ 2860.116539] ? bio_kmalloc+0x3e/0x70 [ 2860.116554] ? bio_copy_from_iter+0x192/0x270 [ 2860.116577] ? bio_kmalloc+0x3e/0x70 [ 2860.116590] bio_kmalloc+0x3e/0x70 [ 2860.116605] blk_rq_map_user_iov+0x390/0x1180 [ 2860.116634] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2860.116656] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2860.116675] ? find_held_lock+0x2b/0x80 [ 2860.116693] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2860.116708] ? lock_release+0xc8/0x290 [ 2860.116721] ? import_ubuf+0x1be/0x220 [ 2860.116739] blk_rq_map_user_io+0x1cf/0x200 [ 2860.116760] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2860.116780] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2860.116803] ? irq_work_queue+0x9c/0x100 [ 2860.116821] ? __asan_memset+0x24/0x50 [ 2860.116838] sg_common_write.constprop.0+0xd75/0x1710 [ 2860.116858] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2860.116872] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2860.116889] ? ___ratelimit+0x465/0xa10 [ 2860.116912] sg_write.part.0+0x6a2/0xb50 [ 2860.116927] ? __pfx_sg_write.part.0+0x10/0x10 [ 2860.116942] ? perf_trace_lock+0xb5/0x5d0 [ 2860.116960] ? __pfx_perf_trace_lock+0x10/0x10 [ 2860.116977] ? lock_acquire+0x15e/0x2f0 [ 2860.116993] ? perf_trace_lock+0xb5/0x5d0 [ 2860.117006] ? find_held_lock+0x2b/0x80 [ 2860.117025] ? get_pid_task+0xfd/0x250 [ 2860.117040] ? perf_trace_lock+0xb5/0x5d0 [ 2860.117057] ? avc_policy_seqno+0x9/0x20 [ 2860.117068] ? selinux_file_permission+0x99/0x600 [ 2860.117090] sg_write+0x86/0xe0 [ 2860.117103] vfs_write+0x2b7/0x1150 [ 2860.117117] ? __pfx_sg_write+0x10/0x10 [ 2860.117130] ? lock_acquire+0x15e/0x2f0 [ 2860.117144] ? __fget_files+0x34/0x3b0 [ 2860.117172] ? __pfx_vfs_write+0x10/0x10 [ 2860.117185] ? __fget_files+0x203/0x3b0 [ 2860.117197] ? lock_release+0xc8/0x290 [ 2860.117214] ? __fget_files+0x20d/0x3b0 [ 2860.117233] ksys_write+0x121/0x240 [ 2860.117246] ? __pfx_ksys_write+0x10/0x10 [ 2860.117266] do_syscall_64+0xbf/0x360 [ 2860.117281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2860.117295] RIP: 0033:0x7efff4616b19 [ 2860.117305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.117319] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2860.117332] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2860.117342] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2860.117350] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.117358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.117366] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2860.117384] [ 2860.142408] debugfs: Bad value for 'source' write$binfmt_aout(r2, &(0x7f0000000300)={{0x108, 0x80, 0x8, 0x1af, 0x2bc, 0xe29, 0x9f, 0x8}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1920) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)) 12:54:49 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000000)='./file0\x00') open_tree(r0, &(0x7f0000000780)='./file0\x00', 0x80800) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6tnl0\x00', r7, 0x2f, 0x5, 0x5, 0x7, 0x18, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, 0x1, 0x20, 0x8000, 0x8}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="1494d4ec66b4b5669a9e9a6b8bb44ce0ff2d2484be022d1d4c1ad554072977ffbf6721243361216c796a3c3b44415eff33ec809ec3a945d2aea88b3aaa6ad54f"]) sendmsg$sock(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="abf86e2c6f9b5f7ecbed71422b9c067368c9521eff39d0348901c79869c6ee49a1e7fbe9d814b16b00853ebbcb241ae3c0dcd6a8217e17cd1fc44848c1fbf38ddbe66cf4deeee6534b13653bed57d7c8cf38b46466fc006aa5a190dbdbc53873c4959d34d16939a04b39a992c1f48b665e27d846e6083c33c661aa14ee244b4056656e238c346a4ff0830b28cbd7f3fbbd365588533942fa65d5cc9508e0d1665abc5444bb3f2be0f6b07e3b2b94e884c435f487c8c668b32e", 0xb9}, {&(0x7f0000000200)="59c63092618eee53b9f13757f1156c9aff63f0fd15d3abbeb68523ecb4f437a801e25a0e89b47d0efff249b3452120a4ac382d4b182effd6723192cc6217dd34ef283d9aa4cfd62cc90151833c282d934a332270710c18f604a9be80d305052799ddbd898a4312ffef515813b2f27d5d6c23200e3682a06583aa", 0x7a}, {&(0x7f0000000280)="0caed323b916ca3180d5b48837bb7b68429df2217c1049b0b0fef9f9d0d498b38ca785061d21f95fd131ee7f79e4f6aacfa6b956908a12a60b73f05f64bec3c0499fb6b586b1b033fe165f80365e697452dedc3924e06a81f6a5dec54d27bbd704badd93ad8e8920d68096d1160862d28c2e9625994d68992d9e", 0x7a}, {&(0x7f0000000300)="d6bd4e76cb81a9b69c77bb20012c2ac5ba53a2e5c5fca714584931eeee152619", 0x20}, {&(0x7f0000000340)="21e479ae4384d11d57fb97091c730ad7111e4e3fc1aa25aa9e50cee8f560191636f6a85edb1862d6121c24beb0a9e688ed2afa8feaf047682218c075dd5029aab68a1eb96d32b677e54a6a7fff05d7dab8d555afa4b0e1ad4b1bd5669528394aa0d732df61098a529bbdb18e2ca3831269ece93966e98c024422ae8777e5e579ed6ac67c3f36bb411fdd6e95594fa08524ced3210d9089c3b2f030284fae6df87267", 0xa2}, {&(0x7f0000000400)="da2cf9a2f44c0410cfbf49ff056bdbcf6a718c09a638dd97037e2dbc9b9fd82db1bb51eeeb84cdaca073cf3c3fa8356a755dc2d53ae793d280ae036368095b5e0d12fd37", 0x44}, {&(0x7f0000000480)="dac022f6f7088d75351dfa9f9367e83566f880b44cfab420f254aeae9f117a4a9169bf36ae4ab050a23e420873e04ed14b17d9e0a3a7272f102705e1ff", 0x3d}], 0x7, &(0x7f0000000540)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0xb5c}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x90}, 0x20004011) 12:54:49 executing program 7: capset(&(0x7f0000000080), &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:54:49 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x3) 12:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 21) [ 2860.197551] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 2860.198802] 9pnet_fd: Insufficient options for proto=fd [ 2860.236955] Invalid option length (575) for dns_resolver key [ 2860.251439] loop4: detected capacity change from 0 to 132 12:54:49 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 2860.253377] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2860.253377] program syz-executor.1 not setting count and/or reply_len properly 12:54:49 executing program 7: capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2860.275055] vfat: Unknown parameter 'fsname' 12:54:49 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 13) 12:54:49 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffe6df2507046b00080002000500000008000800e00000020800040001000000a8d9dc5a3daf9719d3a2196d2cdbbbf1ba76c9e5bccc5935df67fe41570774322d9a4e655b30dfd13d294e2ee48feff2"], 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000140)={0x1000, 0x3, 0x48e, 0x4a1, 0xff, "fdf518185c3dcba4ba925389bc0fbdd5f131bb", 0xd5, 0x80000000}) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000300)={&(0x7f0000000080), 0x8, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x0, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0x0, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x14}, 0x1, 0x0, 0x0, 0x24008845}, 0x20040000) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:54:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 22) [ 2860.359984] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2860.359984] program syz-executor.1 not setting count and/or reply_len properly [ 2860.364234] FAULT_INJECTION: forcing a failure. [ 2860.364234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2860.365311] CPU: 1 UID: 0 PID: 40252 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2860.365331] Tainted: [W]=WARN [ 2860.365336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2860.365344] Call Trace: [ 2860.365349] [ 2860.365354] dump_stack_lvl+0xfa/0x120 [ 2860.365380] should_fail_ex+0x4d7/0x5e0 [ 2860.365399] _copy_from_iter+0x1dc/0x1660 [ 2860.365416] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2860.365432] ? do_raw_spin_lock+0x123/0x260 [ 2860.365450] ? __pfx__copy_from_iter+0x10/0x10 [ 2860.365464] ? find_held_lock+0x2b/0x80 [ 2860.365482] ? __create_object+0x59/0x80 [ 2860.365502] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2860.365519] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2860.365533] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2860.365552] copy_page_from_iter+0xe3/0x180 [ 2860.365570] bio_copy_from_iter+0x108/0x270 [ 2860.365595] blk_rq_map_user_iov+0xc07/0x1180 [ 2860.365620] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2860.365646] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2860.365665] ? find_held_lock+0x2b/0x80 [ 2860.365682] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2860.365696] ? lock_release+0xc8/0x290 [ 2860.365708] ? import_ubuf+0x1be/0x220 [ 2860.365725] blk_rq_map_user_io+0x1cf/0x200 [ 2860.365745] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2860.365764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2860.365785] ? irq_work_queue+0x9c/0x100 [ 2860.365803] ? __asan_memset+0x24/0x50 [ 2860.365820] sg_common_write.constprop.0+0xd75/0x1710 [ 2860.365839] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2860.365852] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2860.365869] ? ___ratelimit+0x465/0xa10 [ 2860.365890] sg_write.part.0+0x6a2/0xb50 [ 2860.365904] ? __pfx_sg_write.part.0+0x10/0x10 [ 2860.365919] ? perf_trace_lock+0xb5/0x5d0 [ 2860.365936] ? __pfx_perf_trace_lock+0x10/0x10 [ 2860.365953] ? lock_acquire+0x15e/0x2f0 [ 2860.365967] ? perf_trace_lock+0xb5/0x5d0 [ 2860.365980] ? find_held_lock+0x2b/0x80 [ 2860.365997] ? get_pid_task+0xfd/0x250 [ 2860.366012] ? perf_trace_lock+0xb5/0x5d0 [ 2860.366028] ? avc_policy_seqno+0x9/0x20 [ 2860.366039] ? selinux_file_permission+0x99/0x600 [ 2860.366060] sg_write+0x86/0xe0 [ 2860.366072] vfs_write+0x2b7/0x1150 [ 2860.366084] ? __pfx_sg_write+0x10/0x10 [ 2860.366095] ? lock_acquire+0x15e/0x2f0 [ 2860.366109] ? __fget_files+0x34/0x3b0 [ 2860.366121] ? __pfx_vfs_write+0x10/0x10 [ 2860.366134] ? __fget_files+0x203/0x3b0 [ 2860.366146] ? lock_release+0xc8/0x290 [ 2860.366162] ? __fget_files+0x20d/0x3b0 [ 2860.366180] ksys_write+0x121/0x240 [ 2860.366193] ? __pfx_ksys_write+0x10/0x10 [ 2860.366212] do_syscall_64+0xbf/0x360 [ 2860.366225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2860.366238] RIP: 0033:0x7efff4616b19 [ 2860.366248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2860.366260] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2860.366273] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2860.366281] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2860.366288] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2860.366295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2860.366302] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2860.366320] [ 2860.946735] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 2860.956506] debugfs: Bad value for 'source' [ 2861.008132] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 2861.010080] 9pnet_fd: Insufficient options for proto=fd [ 2861.018395] mac80211_hwsim hwsim3 wlan1: left promiscuous mode 12:55:01 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000200)=0xc) capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x5, 0x1678, 0x5, 0x3, 0x80000000, 0x3}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x2) r1 = gettid() mount(&(0x7f0000000240)=@sr0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='configfs\x00', 0x1220002, &(0x7f0000000300)='+!,{-#\x00') capset(&(0x7f00000001c0)={0x19980330, r1}, &(0x7f0000000180)={0x2a543d23, 0x4, 0xfffffffb, 0xffffff33, 0xfffffff9, 0x9}) 12:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 23) 12:55:01 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) uname(&(0x7f00000004c0)=""/144) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:55:01 executing program 7: capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2872.044867] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2872.044867] program syz-executor.1 not setting count and/or reply_len properly [ 2872.046360] FAULT_INJECTION: forcing a failure. [ 2872.046360] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.047348] CPU: 1 UID: 0 PID: 40419 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2872.047368] Tainted: [W]=WARN 12:55:01 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 14) 12:55:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000340)) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000040)=0x1) r2 = dup2(r0, 0xffffffffffffffff) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = pidfd_getfd(r2, r2, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$SG_IO(r3, 0x2285, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x51, 0x20, @buffer={0x0, 0xac, &(0x7f0000000080)=""/172}, &(0x7f0000000140)="d5c758659a306a906e7590ea7524a78978b62b794de3e718e6319736e68064ed2e5d081d54be2944cd6c496ff79f0c5d451f9b92fe55a0460b7577a3dd759ac1d8cf2fa94708f28f7c33293b1b82bd896b", &(0x7f00000001c0)=""/181, 0x0, 0x13, 0x0, &(0x7f0000000280)}) 12:55:01 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, 0x0) [ 2872.047372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.047380] Call Trace: [ 2872.047384] [ 2872.047389] dump_stack_lvl+0xfa/0x120 [ 2872.047415] should_fail_ex+0x4d7/0x5e0 [ 2872.047434] should_failslab+0xc2/0x120 [ 2872.047451] __kmalloc_noprof+0xc8/0x6e0 [ 2872.047468] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2872.047487] ? bio_copy_from_iter+0x192/0x270 [ 2872.047506] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2872.047528] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2872.047546] blk_rq_map_user_iov+0x1fd/0x1180 [ 2872.047570] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2872.047592] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2872.047611] ? find_held_lock+0x2b/0x80 [ 2872.047633] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2872.047647] ? lock_release+0xc8/0x290 [ 2872.047660] ? import_ubuf+0x1be/0x220 [ 2872.047677] blk_rq_map_user_io+0x1cf/0x200 [ 2872.047701] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2872.047720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2872.047742] ? irq_work_queue+0x9c/0x100 [ 2872.047759] ? __asan_memset+0x24/0x50 [ 2872.047774] sg_common_write.constprop.0+0xd75/0x1710 [ 2872.047793] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2872.047807] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2872.047823] ? ___ratelimit+0x465/0xa10 [ 2872.047845] sg_write.part.0+0x6a2/0xb50 [ 2872.047859] ? __pfx_sg_write.part.0+0x10/0x10 [ 2872.047873] ? perf_trace_lock+0xb5/0x5d0 [ 2872.047890] ? __pfx_perf_trace_lock+0x10/0x10 [ 2872.047907] ? lock_acquire+0x15e/0x2f0 [ 2872.047921] ? perf_trace_lock+0xb5/0x5d0 [ 2872.047934] ? find_held_lock+0x2b/0x80 [ 2872.047952] ? get_pid_task+0xfd/0x250 [ 2872.047966] ? perf_trace_lock+0xb5/0x5d0 [ 2872.047982] ? avc_policy_seqno+0x9/0x20 [ 2872.047993] ? selinux_file_permission+0x99/0x600 [ 2872.048014] sg_write+0x86/0xe0 [ 2872.048026] vfs_write+0x2b7/0x1150 [ 2872.048039] ? __pfx_sg_write+0x10/0x10 [ 2872.048051] ? lock_acquire+0x15e/0x2f0 [ 2872.048064] ? __fget_files+0x34/0x3b0 [ 2872.048077] ? __pfx_vfs_write+0x10/0x10 [ 2872.048089] ? __fget_files+0x203/0x3b0 [ 2872.048101] ? lock_release+0xc8/0x290 [ 2872.048117] ? __fget_files+0x20d/0x3b0 [ 2872.048135] ksys_write+0x121/0x240 [ 2872.048147] ? __pfx_ksys_write+0x10/0x10 [ 2872.048166] do_syscall_64+0xbf/0x360 [ 2872.048180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2872.048193] RIP: 0033:0x7efff4616b19 [ 2872.048202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2872.048214] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2872.048227] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2872.048235] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2872.048243] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2872.048250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2872.048257] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2872.048275] [ 2872.122331] Invalid option length (1047290) for dns_resolver key 12:55:01 executing program 5: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) uname(&(0x7f00000001c0)=""/3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r2 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x96df, 0x4, &(0x7f0000001700)=[{&(0x7f00000004c0)="c6d281bcf82b0d39493902caa21c9895216bea0e9d1a5d8a63346d0ee0f9225b15afa51341ce97e25cf8d27b540cf838017d10f81396d4cd537e9619131042a22c364bc2a6e2d6321ad93a5edbc5e92991726424da4e2718b62388fb3804c9f13b5cd4a94b1d3a81cdb020ff56cc7e7e960484dd3c3c91c2972c452133953b71e9390c792e7df2ce26a6e8fd97ea38e19e799bdedceec4020d763a2cd018b6125d9b59fc98fd9d8bcb2483ddb98d25b5d13d335c5afbdfae11", 0xb9, 0x3c9f}, {&(0x7f0000000580)="24ac0a0745554bb888787b0f0a89e817ff69bd3d98fbd96fc88516431fe7cf45b83f8a7db380310d8292b683e83487d229a568ddae5d656fef2b821066871b53bc14d76a9f4cd8a5b71e3a3fb1b397b1f9acce2452ca6907f14311d5a71952feacac319b61e0f051c10ee8909da86ea65de8b56245daf8f60acf07bddefa86d988fc512897118ef9c339f5d2b83fc98009f3723bd6b4d81aeaea82c5d32e4d026b8c0f5d4a0c06c1db97fad816b26fd62809391f895501e57a21571cd13164d5e60530185f155a350e50b2b239bcd5d3b54a89ca1575b6a2bcd756832ad66c2267abeb0296071f9ea42b28e0266e8b8848806f73841a1de12f63b53ee3d6b7ca1e2ecc2be37d6d7ec615906314e644458ea87d13f464928ca72955d57d03606c89f5e1ac5017af38dd2e9e2739f3df60f24137f8763c177d17feeccc7e228353354110aeaa413c175855a88e568239c1f99235f09c95d330338eb742d233d75738994932f57dcee608820d52ed0494601710e2af9a0238251141fd2a078365465902a9ebf7f814fa5c6a2dfb19dda208ee8b175a45697f3bf5f1f3bca53afcc2ac172cbc75d87f7a378280a331bd3cea1dc8177292b71ae7bafdf21088bcc6b0a5bfec96175cd056f173595999e22a786cbbd38397f62e6e4650f3dee8857e7bb58b7da4a450d39267a501e8f68efa46708ec4a1261f0257a26e1d633dfa18d7a583023d23a51974adaee14b4368b4f407b0f16457289ea01402867a9d215f72c28177a4badd622a77df0af44e19e23c5a4ef8ee238a4480519441fbc292ef775e90cd031dfa19d10a3db4bd09b17fdd4f14ef21a1bff78eb3ceae08409a695d6d03997b45e84d5ca8af9dc1cbba4bd7c0f5d6e22eceec966c1ec52c39bd494c9fa28d9630cb10bab8c7c4e65e8f568eebc1e057495d670425de7b938335305e1cc5f6b6a61e0e365a3030a4703decf56f7b3b7e86dfe070be485727bc83bbe8974e6378528209dbf5a38e8fb8f66223995a2231700f52da25f930385420bbb275bde36b9526eff2a73b23ac1eb106876e27c754597d6abd7cea6bd416439166d37fec0fae2ce0ddee9d473416add141e0dfa28b92248a949605cab27da83d9afa37c95179b25eadf1c6b4c03672f414bd4c4b8c19717f1e02ce6334caba3b49e846518ff54229e9ab7975676a4d1b38f8ce03511d3bdb4934bf7c9893c17c9e0c1b3fd39f0e3ebea34431c3ef84e0f706eb178ee0d875f485fe841ac52c27d5cca1a126fade07cac50a45fe20181d3c8dd79a04d3474828b9a4944308e2e28bcffc708a998574c05ace6cd215bcf629f152b6934b7a4e42c4117303d84794248fb9ad30fb55c6e8f2cb9b452c50e3d3f87afefe7b8ba81a1df2cd96131d3dbb2643461a2a850aae4552f54a15f628a93e8c1729d41461e5e39af7c9e61b74b29e9ae43d2dd8f8a240fc8d9c91532eaf2eebf27ec7c8139bdbe1adcff0dc5e7601cc75b9e8637a7c07f05e6494a720a956cebb6147a720a4fde4a49c46b5edaaa03af1efdcec03e7c403b759c3c501abd8ace877aef89acc57c9ddb2618325c1bbfa0b26f737af89f7150bc00047b6834efe7f96fc3daf52c02abfcee54ff6a3787d8fd16b4203edd48ff2d233a7688223c490c5b13f5e585e070608910f907ccd5bdab8feec1853666e629df587bf329fbf1d11499013288e08d7ac6d7f1a642d8acdfc7b98d6f7f161d33ebd231f541a659cdcffe7ec3207b7f8d502769d827586112ec98c4660e2e2d82c2569ac297d069a8f779189308dc0e5787f4655456f3542be47e34bbc15143e6706d211e42dda186a1c0d49b6eb98244a1f4d3bc5fd92644501d0a4093e697166c65200f8d123fee5c93a3ea0753828b2854f5a95663a3950873799c8e02191c34e4c3d5cd2688f4b6c47aa7fd12fd7ce9c542bd42bc4bb96a48fd589699ffdf35f33c405a05e869d4b81cb468ec1c888683de2b0bb184ff8495aeba01874ebf640d963b3f0c409a942eb6005bb37c4bd8c6ff150c875538607da280ad1d36e7056ac47894ad0adf7f3da364d13e306f55f7125cc4ddf93bc20874fb66dc0ccc6304d77204f4418add4f08d5bf5757c986ae5f8ecf6bc8c96ba06b1b13d4db618ed20b22b59108be47611b5ff047625e10e08f47c25ed903314eb52e3fefa93fb357670469725c88e38962510cd881716af9af7a09ddb0b14c0e2f53c8286dd519b0220343ffc90e0d0a9ebc1fb0bff8483030e263b173d286ad4e983f26b833ea9adf999227e640e65e91d7d63d7ea77dec3fedbf6b6a5bc2365e9ea7c5fcb6921ca035ac01e43825eb82ab06a176eedcfbea9c5d215186e00c6fdd336ed265c3089e7397e767997a069ffe985bd1031ab2e8404eee2b4e59545d32508739087828d1bc9fdb1ec027ea1a77fd3ae86d0f37b6d038355f7a42ea2632d621ea3063d15f574cbcd768ffad0d90fe12c8eb11527f1f09ddf1584efd7dd61ebe747b03fd3671bb186813ed6195f10b9435547287e9c7f8633c88ad18e651b6e66141a69ce3a943b42ffdac42814e0ecd5a7007b50da9dd1642243270f8d1672a0c7d53aceef120639b70afcac15fcf47b5bdfc7398596bb502a596c1609cea3d43725ee2f2c8c2dd6a7b4baf4047644d8e40284fff369ce653cacf1b1a53391a23ef04af0a72cb60f21c2c96d1bd483a1aaebb65d9001ec2463445302c1681adb7d3540d0b67ae9d0fae2a93e66730c5fa0abac8a1f4e74b8c700cf3a32df0a16805f7de88a566c7e2d202c40c5a554e0412cdcae62468eb9479191532a101ed0a2e503b8800d620af34226fae9f2ef2aa70c4420c6b18c1ac5bfe9e571f284cc22cf8b79dbe2b4a788586f50dd9998afa4d41f31243090050d8919fe2331e328b3abf47007e750332bbc6407dc78ff745c738c8f9a8774cfff206213df81a0b99cd74ef27129e1ea11f633b46b838bee3832ba32bae5ce92d07111ae5e5249aa9349007a64dfa74635a16b21160e44c9b6462de2ab5279bd0abba00cd80370d7d41a78f4458b8f96f3744216c172bba8b9ed8b42904407c124e1a4bea99e5b60f345edd791cffd7c0433ed3ec4bd741a6000394ef6f19226f865b692c259df8f9d4959a52341ccd8c62ce9ecb795b6f48e5f227cc4810c123a5186162b42041f4963f7e0082264d13ba549bb0495278dbe72a4ad7d53237a79f30824cd1fdf1587d7952c5a442705b16629e9cef7af95fdcefe0f7dcac4688c1e9d4275e50c283727613afb22e17d078b2bc07ef7df69f8a72761738b3d47d8595fc7343e96a37b9a8882036554ea5ef9f13c23c0ad2f6ab1ff40e20e09f76e01ce1115566ad39e7806224e6b6c50d0a68b71be17969ff2bbc79dfaea1370d0062fd03d847458e41f146777e7947998cee4b4ecc5d917d84f6a539217efb1da1a83d02d3313837ef3bc7a54967ebfcc208dbabb9d19b640bb7f736d4d2028d6704af60c6891ac3f4e3066da24c739dbb25abb090731c39222484c0ff1a60884b7dd8e1f4937f5e5d950c9a87a912dd403bea1eaaee4af0b00c087e2f546c8158fa80a241f70a4c2fe425a2866231e5c22326f98da7e7fc13361b47acefdef0680a05cc8d90e30f47bb78966ea48f189b95e62e7c9c64e5514d6c48089db280f99df56d09cc7824ffc5fa86fd595308afe5448ba23693dafbfbb4e338f801aaa48df622ea78dd0fff62adb2297b5914fdd51abaaad060fa7bda92a53df7179d9e9a4aea2a23f494ae62ccf844b1e3e2c350e0c483df8d1cc71aeafefebb6949afae2c3358d7e76ef2641db7c740101a80eceee53b9224cb63825775f23294f30ddceeb0d0547ad004035e352159356c941926105513248f26c31dcb854e1d1f57bbf32bf7adf06dd0b178ed89e88997dc7ce9f01dbf1f1e3701be00eb03cb60e79c26740460fd7f5f9d75157e0724bfc03cd6cc79839d1a5fb4d394cba8d1b8312b5f4c877691cc91ad985f647a7c31cef6d58f17fce9d9016f87b0b72fc82420fd08aa5ece910b14cf4dee6e55b16ce5855e4ebf82a86f4f3aadcfb93500e24932221679939f11545ec15935b953281d431ae5ade3c8b9efd06a8a5e6ff42afed20c791b7d63e3709f8a54c345d780505a923a5810b38f071489f5ac292f7988bfd424bdfe0746b54f4b21544d6158d8b360684e3bde927ef6624ea856c6f03771fe445be8cc0c4bc5b74e3cb73f9f5bb4e8c02a3a43a68c8de30ce6685645cf912d0e57aaa166707d4a8c44dce7aa0d930acf79892b755485eaaa5c74f62b40197fcd2155e70e49fea70778c6f08d69b347e0559fc5092746c459f780848bc46fadad55945791fd661285d13f368cedecebffbfa3afc3f1167e8769c502c7bfa7e8ca12975b376e0e0a0f69c9fd18601b1bb38899bf51071d4d6d42dad71a5776379045c9ced84364ed2431eb1ac315602bafce619fa2476fa67e4904b9bb32130fa87680e300655866c92eed889fc0e4f089158052b520dcd792e285d6c11e55b7abf6d035b354f19b875f0f31df5ecd4b766b41d8f3427a32742955f805d6dee65ad11b3bcdf52ca89bba017bb4d5523ca914cce347e6ee7ae5354454de39a6af02e42ecef219597637beda4b19a6a055a0dde4b768816b6c4947be16874839d6539760e82de9723db1ea7c9f87183f0eab5f46114a80a164a93a0dca0e6a58741834d07fc91c857bf5a32ced28a4fa7ff2c07a137e550b21a7c3fe5e8e48d108d39da00180857a03f86ff36cdf34a997f67931b582492c0ee513253ae4b4869f201486090eee7c32cb64679a97473e42b123d2d42e9d2709a8cd03a35bfe74bca326603e215fefbf0ae8c54678b207a227a56059e47fed191de8f711b99cc99f4f47b68b67846ecb45e8a3e2cc466c94672eaf3f84fdf2c144bc6ff17b0180e3b51a0a632d5203d3783d7c8e0548f1b4843e99c52bae5fa706fbbe2c7a96e1cb581678a053e761334e2b0cc4a538cbd10723a7bdd616934f2250de43d3d97ad513aed52b7ca7cc8cb086a906ff3ab892149f75f367144bc0e618a16cc6f906735a842b526d1047ef916079ad15c35318ae4288770c56ff82525df972bcc9c1f8d79d61d093ebaf977674bb986c2143a0826cc92566066014607d662eacf8b466c95c603fff80f02387bc03a294a7fc76e4cfd98f3045a2c62a4bf8f35f06e4eb98457b64c184bfacdae803908138da747c46c6243f47ce6728dfeb9d06109ad1b4cef097c7e289fc82e7e61f71c4a88d27e907079284c1dc0e20cfbe4a328e0cda30fd7782e9eb27033fd72316db2d30a226a9acaa9d08721c8ce737b028489a3b1511aa3a740528d5e4845dfd6f976ae0d8693dc130cef425c401cde30ae067d7d7696b02d7a22aae2182bda29114f1406577d86de6ea30a6168ebeddce2103632fcb33f893bce78ae78466421925af98276763495b8b2d14d5b557d6cc62560ccd117a8055cd27313ca913196d2f72d6bc44ca61ff57e8ef248b32d095f7a747e354e70ee844220edd1ced36ebf75fb61f6dbac0a0f5996d8576021ced1c04abb53fa29bb5c1a879573921984986d7ac0268f9c9dcb65770c93691d96241ae121c5856a9b94bc6d72c3ccad1afb8914af67482e0e3f17f0fa822dac40853d891ade215e60eb79d3075bb66f588753f20bd051c14a9e383f416d323219b97d0571264cb0c9a5c035ae1c35fe9c7ca704f9b7ef62a279d2301dcf63deac6fee6b29753d0b2300c04ecc9b6ce144f9f57968716ee6905a8f6e70e1", 0x1000, 0x8469}, {&(0x7f0000001580)="1ba527e229483f7cf72b5320ce4f6d2484ac3d339140efd23e47dc610c7cb5aaa9ec95821aa6a80a2ad7989b48af78123a4ef781f707cfc94323311bbd7c1722e7c187f982b7a7d99380c36bde6bbfb5aa92a3ab039d3e64d6f51e3d161dacb08808709d7329bc56005ca57242c3bf98b3823f662c9f5eb6a425e651de2fce579742ccc2c51a2b31d02d41adb41be5d19cdac344d4ae9b3860671edbb267403d117792b135ab", 0xa6, 0x8}, {&(0x7f0000001640)="d125b98d4e1e939691a7dda741d84ac21d690c456ce6c07a7546bfc0004272d36a402daf174d3467ed97074998f3f303346e8a414101af7ec6802934416cfb9aee655840c1a35bc880100924c798883fea9d8443cac26be3139d8ec642700a4f7733232e3d6df555a54bc4069adca53b71f7ae77110a85797016e948ec5562f4e990c19aec49d69ef8d65711a8540f32f8dcf334e43110acd131e01858298999445b85c6f122efe46f9389e9c9b2c01e1df5", 0xb2, 0x9}], 0x8, &(0x7f00000003c0)={[{@utf8no}, {@utf8no}], [{@fsname={'fsname', 0x3d, 'dns_resolver\x00'}}, {@obj_role={'obj_role', 0x3d, 'dns_resolver\x00'}}]}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x810, r2, 0x86f90000) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 24) [ 2872.145025] FAULT_INJECTION: forcing a failure. [ 2872.145025] name failslab, interval 1, probability 0, space 0, times 0 [ 2872.146801] CPU: 0 UID: 0 PID: 40457 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2872.146837] Tainted: [W]=WARN [ 2872.146844] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2872.146858] Call Trace: [ 2872.146866] [ 2872.146874] dump_stack_lvl+0xfa/0x120 [ 2872.146919] should_fail_ex+0x4d7/0x5e0 [ 2872.146954] should_failslab+0xc2/0x120 [ 2872.146984] __kmalloc_cache_noprof+0x73/0x690 [ 2872.147019] ? lookup_mnt+0x193/0x550 [ 2872.147042] ? lock_release+0xc8/0x290 [ 2872.147067] ? get_mountpoint+0xee/0x470 [ 2872.147103] ? get_mountpoint+0xee/0x470 [ 2872.147130] get_mountpoint+0xee/0x470 [ 2872.147161] do_lock_mount+0x24a/0x580 [ 2872.147188] ? __pfx_do_lock_mount+0x10/0x10 [ 2872.147213] ? ktime_get_real_seconds+0x9/0x20 [ 2872.147236] ? mnt_warn_timestamp_expiry+0x14a/0x620 [ 2872.147273] path_mount+0x167f/0x1dd0 [ 2872.147301] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2872.147329] ? __pfx_path_mount+0x10/0x10 [ 2872.147357] ? putname.part.0+0x11b/0x160 [ 2872.147397] ? putname.part.0+0x11b/0x160 [ 2872.147433] __x64_sys_mount+0x27b/0x300 [ 2872.147460] ? __pfx___x64_sys_mount+0x10/0x10 [ 2872.147498] do_syscall_64+0xbf/0x360 [ 2872.147523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2872.147547] RIP: 0033:0x7f9badc19b19 [ 2872.147564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2872.147587] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2872.147609] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2872.147625] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2872.147647] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2872.147661] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 2872.147675] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2872.147710] [ 2872.169687] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2872.169687] program syz-executor.1 not setting count and/or reply_len properly 12:55:01 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='1dev/nullb0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x2010, 0xffffffffffffffff, 0x10000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r1}}, 0x80) [ 2872.216328] Invalid option length (575) for dns_resolver key 12:55:01 executing program 7: capset(&(0x7f0000000080)={0x20071026}, 0x0) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x571081, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0x80000001, 0x101, 0x3f10, 0x0, 0x2, "680a852f8e080ac1e61be8e17e6d8718ba5124"}) r3 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) [ 2872.236453] loop5: detected capacity change from 0 to 132 [ 2872.255324] vfat: Unknown parameter 'fsname' 12:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 25) 12:55:01 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x6, 0x3, 0x9, 0x7, 0x2, 0x7}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) capset(&(0x7f00000001c0)={0x19980330, r1}, &(0x7f0000000200)={0x7, 0x7, 0xc407048, 0x7, 0x7ff, 0x9}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xa256, 0x1}}, './file0\x00'}) mknodat$loop(r5, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:55:01 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='msdos\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7ff}}, './file0\x00'}) mknodat(r1, &(0x7f0000000140)='./file0\x00', 0x8, 0x950) [ 2872.358571] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2872.358571] program syz-executor.1 not setting count and/or reply_len properly 12:55:01 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 15) [ 2872.419267] ./file0: Can't lookup blockdev 12:55:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 26) 12:55:01 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000280)=[{{&(0x7f0000000140), 0x6e, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x68}}], 0x1, 0x80, &(0x7f00000002c0)={0x77359400}) [ 2872.496935] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2872.496935] program syz-executor.1 not setting count and/or reply_len properly 12:55:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 1) 12:55:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "7c910c2d7e8ae75643f3994adb830ba59f7ad967b551ab46dd22d21f6ee2058fcc2f0dd7fcb5080015b67ed87380bd9ede1dc791ef6810f5e500817b342d09d561ab1429eea793dafb57b71be86719753fe820e4e60e0ace95500b23d76f7d0ad922313148c950b42b132e6135c95fc9523b49a42732fe9bdc871d77ba56156807d46c23adbbf2bfbdffacccb485748f127d828e7bd358fd2a54"}, 0x9e) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:55:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x15, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:55:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 27) 12:55:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 16) 12:55:13 executing program 2: fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) 12:55:13 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10870}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:55:13 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) [ 2883.966588] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2883.966588] program syz-executor.1 not setting count and/or reply_len properly [ 2883.975519] FAULT_INJECTION: forcing a failure. [ 2883.975519] name failslab, interval 1, probability 0, space 0, times 0 [ 2883.977206] CPU: 0 UID: 0 PID: 40781 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2883.977243] Tainted: [W]=WARN [ 2883.977250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2883.977264] Call Trace: [ 2883.977272] [ 2883.977282] dump_stack_lvl+0xfa/0x120 [ 2883.977335] should_fail_ex+0x4d7/0x5e0 [ 2883.977370] should_failslab+0xc2/0x120 [ 2883.977399] __kmalloc_cache_noprof+0x73/0x690 [ 2883.977434] ? __lock_acquire+0xc65/0x1b70 [ 2883.977461] ? get_mountpoint+0xee/0x470 [ 2883.977498] ? get_mountpoint+0xee/0x470 [ 2883.977527] get_mountpoint+0xee/0x470 [ 2883.977558] attach_recursive_mnt+0x202/0x1770 [ 2883.977594] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 2883.977620] ? do_raw_spin_unlock+0x53/0x220 [ 2883.977660] ? get_mountpoint+0x163/0x470 [ 2883.977692] ? do_lock_mount+0x2aa/0x580 [ 2883.977719] graft_tree+0x184/0x210 [ 2883.977746] do_add_mount+0x1cb/0x330 [ 2883.977777] path_mount+0x173e/0x1dd0 [ 2883.977804] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2883.977833] ? __pfx_path_mount+0x10/0x10 [ 2883.977861] ? putname.part.0+0x11b/0x160 [ 2883.977900] ? putname.part.0+0x11b/0x160 [ 2883.977936] __x64_sys_mount+0x27b/0x300 [ 2883.977963] ? __pfx___x64_sys_mount+0x10/0x10 [ 2883.978001] do_syscall_64+0xbf/0x360 [ 2883.978025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2883.978048] RIP: 0033:0x7f9badc19b19 [ 2883.978065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2883.978087] RSP: 002b:00007f9bab18f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2883.978109] RAX: ffffffffffffffda RBX: 00007f9badd2cf60 RCX: 00007f9badc19b19 [ 2883.978125] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 2883.978139] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.978152] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 2883.978166] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2883.978199] [ 2883.987512] FAULT_INJECTION: forcing a failure. [ 2883.987512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2883.992106] FAULT_INJECTION: forcing a failure. [ 2883.992106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2883.992869] CPU: 1 UID: 0 PID: 40784 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2883.992914] Tainted: [W]=WARN [ 2883.992923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2883.992938] Call Trace: [ 2883.992950] [ 2883.992960] dump_stack_lvl+0xfa/0x120 [ 2883.993006] should_fail_ex+0x4d7/0x5e0 [ 2883.993048] strncpy_from_user+0x3b/0x2f0 [ 2883.993091] setxattr_copy+0x86/0x210 [ 2883.993125] path_setxattrat+0xf2/0x290 [ 2883.993151] ? __pfx_path_setxattrat+0x10/0x10 [ 2883.993184] ? lock_release+0xc8/0x290 [ 2883.993222] ? __mutex_unlock_slowpath+0x157/0x750 [ 2883.993260] ? kernel_write+0x643/0x660 [ 2883.993296] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2883.993362] ? __fget_files+0x20d/0x3b0 [ 2883.993397] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2883.993423] ? fput+0x6a/0x100 [ 2883.993464] ? ksys_write+0x1a3/0x240 [ 2883.993490] ? __pfx_ksys_write+0x10/0x10 [ 2883.993522] __x64_sys_lsetxattr+0xc9/0x140 [ 2883.993559] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2883.993587] do_syscall_64+0xbf/0x360 [ 2883.993614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2883.993651] RIP: 0033:0x7f4505a39b19 [ 2883.993670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2883.993693] RSP: 002b:00007f4502faf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2883.993721] RAX: ffffffffffffffda RBX: 00007f4505b4cf60 RCX: 00007f4505a39b19 [ 2883.993741] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 2883.993759] RBP: 00007f4502faf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2883.993774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2883.993789] R13: 00007ffd480229af R14: 00007f4502faf300 R15: 0000000000022000 [ 2883.993828] [ 2883.999836] Invalid option length (1047482) for dns_resolver key [ 2884.000586] CPU: 0 UID: 0 PID: 40778 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2884.000623] Tainted: [W]=WARN [ 2884.000636] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.000649] Call Trace: [ 2884.000657] [ 2884.000665] dump_stack_lvl+0xfa/0x120 [ 2884.000703] should_fail_ex+0x4d7/0x5e0 [ 2884.000735] _copy_from_iter+0x1dc/0x1660 [ 2884.000768] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2884.000794] ? do_raw_spin_lock+0x123/0x260 [ 2884.000825] ? __pfx__copy_from_iter+0x10/0x10 [ 2884.000851] ? find_held_lock+0x2b/0x80 [ 2884.000885] ? __create_object+0x59/0x80 [ 2884.000921] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2884.000953] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2884.000979] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2884.001014] copy_page_from_iter+0xe3/0x180 [ 2884.001048] bio_copy_from_iter+0x108/0x270 [ 2884.001094] blk_rq_map_user_iov+0xc07/0x1180 [ 2884.001140] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2884.001180] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2884.001215] ? find_held_lock+0x2b/0x80 [ 2884.001247] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2884.001272] ? lock_release+0xc8/0x290 [ 2884.001295] ? import_ubuf+0x1be/0x220 [ 2884.001337] blk_rq_map_user_io+0x1cf/0x200 [ 2884.001376] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2884.001412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2884.001452] ? irq_work_queue+0x9c/0x100 [ 2884.001483] ? __asan_memset+0x24/0x50 [ 2884.001511] sg_common_write.constprop.0+0xd75/0x1710 [ 2884.001547] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2884.001572] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2884.001603] ? ___ratelimit+0x465/0xa10 [ 2884.001644] sg_write.part.0+0x6a2/0xb50 [ 2884.001669] ? __pfx_sg_write.part.0+0x10/0x10 [ 2884.001697] ? perf_trace_lock+0xb5/0x5d0 [ 2884.001729] ? __pfx_perf_trace_lock+0x10/0x10 [ 2884.001762] ? lock_acquire+0x15e/0x2f0 [ 2884.001788] ? perf_trace_lock+0xb5/0x5d0 [ 2884.001812] ? find_held_lock+0x2b/0x80 [ 2884.001844] ? get_pid_task+0xfd/0x250 [ 2884.001870] ? perf_trace_lock+0xb5/0x5d0 [ 2884.001899] ? avc_policy_seqno+0x9/0x20 [ 2884.001919] ? selinux_file_permission+0x99/0x600 [ 2884.001957] sg_write+0x86/0xe0 [ 2884.001979] vfs_write+0x2b7/0x1150 [ 2884.002002] ? __pfx_sg_write+0x10/0x10 [ 2884.002025] ? lock_acquire+0x15e/0x2f0 [ 2884.002049] ? __fget_files+0x34/0x3b0 [ 2884.002071] ? __pfx_vfs_write+0x10/0x10 [ 2884.002094] ? __fget_files+0x203/0x3b0 [ 2884.002116] ? lock_release+0xc8/0x290 [ 2884.002146] ? __fget_files+0x20d/0x3b0 [ 2884.002179] ksys_write+0x121/0x240 [ 2884.002203] ? __pfx_ksys_write+0x10/0x10 [ 2884.002239] do_syscall_64+0xbf/0x360 [ 2884.002262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.002284] RIP: 0033:0x7efff4616b19 [ 2884.002301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.002322] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2884.002343] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2884.002359] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2884.002373] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.002387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2884.002400] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2884.002433] 12:55:13 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 28) 12:55:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 17) 12:55:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:55:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 2) 12:55:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) close_range(r1, r4, 0x0) 12:55:13 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:13 executing program 0: preadv2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)=""/231, 0xe7}, {&(0x7f0000000240)=""/56, 0x38}], 0x2, 0x1, 0xd8, 0x8) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x14) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f6e7d671869316e"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 2884.297313] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2884.297313] program syz-executor.1 not setting count and/or reply_len properly [ 2884.308361] FAULT_INJECTION: forcing a failure. [ 2884.308361] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.310068] CPU: 0 UID: 0 PID: 40905 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2884.310107] Tainted: [W]=WARN [ 2884.310115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.310129] Call Trace: [ 2884.310138] [ 2884.310147] dump_stack_lvl+0xfa/0x120 [ 2884.310190] should_fail_ex+0x4d7/0x5e0 [ 2884.310223] should_failslab+0xc2/0x120 [ 2884.310253] __kmalloc_noprof+0xc8/0x6e0 [ 2884.310287] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2884.310322] ? bio_copy_from_iter+0x192/0x270 [ 2884.310356] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2884.310397] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2884.310430] blk_rq_map_user_iov+0x1fd/0x1180 [ 2884.310476] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2884.310516] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2884.310551] ? find_held_lock+0x2b/0x80 [ 2884.310584] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2884.310608] ? lock_release+0xc8/0x290 [ 2884.310648] ? import_ubuf+0x1be/0x220 [ 2884.310692] blk_rq_map_user_io+0x1cf/0x200 [ 2884.310729] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2884.310765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2884.310804] ? irq_work_queue+0x9c/0x100 [ 2884.310835] ? __asan_memset+0x24/0x50 [ 2884.310863] sg_common_write.constprop.0+0xd75/0x1710 [ 2884.310898] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2884.310923] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2884.310954] ? ___ratelimit+0x465/0xa10 [ 2884.310994] sg_write.part.0+0x6a2/0xb50 [ 2884.311020] ? __pfx_sg_write.part.0+0x10/0x10 [ 2884.311047] ? perf_trace_lock+0xb5/0x5d0 [ 2884.311078] ? __pfx_perf_trace_lock+0x10/0x10 [ 2884.311109] ? lock_acquire+0x15e/0x2f0 [ 2884.311136] ? perf_trace_lock+0xb5/0x5d0 [ 2884.311160] ? find_held_lock+0x2b/0x80 [ 2884.311192] ? get_pid_task+0xfd/0x250 [ 2884.311218] ? perf_trace_lock+0xb5/0x5d0 [ 2884.311247] ? avc_policy_seqno+0x9/0x20 [ 2884.311266] ? selinux_file_permission+0x99/0x600 [ 2884.311304] sg_write+0x86/0xe0 [ 2884.311326] vfs_write+0x2b7/0x1150 [ 2884.311349] ? __pfx_sg_write+0x10/0x10 [ 2884.311371] ? lock_acquire+0x15e/0x2f0 [ 2884.311395] ? __fget_files+0x34/0x3b0 [ 2884.311418] ? __pfx_vfs_write+0x10/0x10 [ 2884.311442] ? __fget_files+0x203/0x3b0 [ 2884.311465] ? lock_release+0xc8/0x290 [ 2884.311495] ? __fget_files+0x20d/0x3b0 [ 2884.311528] ksys_write+0x121/0x240 [ 2884.311552] ? __pfx_ksys_write+0x10/0x10 [ 2884.311587] do_syscall_64+0xbf/0x360 [ 2884.311611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.311644] RIP: 0033:0x7efff4616b19 [ 2884.311668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.311694] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2884.311716] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2884.311732] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2884.311746] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.311759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2884.311773] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2884.311807] [ 2884.396841] FAULT_INJECTION: forcing a failure. [ 2884.396841] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.398410] CPU: 1 UID: 0 PID: 40962 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2884.398449] Tainted: [W]=WARN [ 2884.398456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.398468] Call Trace: [ 2884.398476] [ 2884.398484] dump_stack_lvl+0xfa/0x120 [ 2884.398529] should_fail_ex+0x4d7/0x5e0 [ 2884.398560] ? getname_flags.part.0+0x48/0x540 [ 2884.398589] should_failslab+0xc2/0x120 [ 2884.398615] kmem_cache_alloc_noprof+0x72/0x690 [ 2884.398654] ? getname_flags.part.0+0x48/0x540 [ 2884.398681] getname_flags.part.0+0x48/0x540 [ 2884.398713] getname_flags+0x95/0xe0 [ 2884.398735] path_setxattrat+0x25d/0x290 [ 2884.398757] ? __pfx_path_setxattrat+0x10/0x10 [ 2884.398783] ? lock_release+0xc8/0x290 [ 2884.398812] ? __mutex_unlock_slowpath+0x157/0x750 [ 2884.398843] ? kernel_write+0x643/0x660 [ 2884.398869] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2884.398905] ? __fget_files+0x20d/0x3b0 [ 2884.398932] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2884.398955] ? fput+0x6a/0x100 [ 2884.398980] ? ksys_write+0x1a3/0x240 [ 2884.399002] ? __pfx_ksys_write+0x10/0x10 [ 2884.399028] __x64_sys_lsetxattr+0xc9/0x140 [ 2884.399050] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2884.399072] do_syscall_64+0xbf/0x360 [ 2884.399094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.399116] RIP: 0033:0x7f4505a39b19 [ 2884.399131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2884.399151] RSP: 002b:00007f4502faf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2884.399172] RAX: ffffffffffffffda RBX: 00007f4505b4cf60 RCX: 00007f4505a39b19 [ 2884.399186] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 2884.399199] RBP: 00007f4502faf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.399212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2884.399224] R13: 00007ffd480229af R14: 00007f4502faf300 R15: 0000000000022000 [ 2884.399254] 12:55:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:55:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) (fail_nth: 18) 12:55:13 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x800802, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x12000) 12:55:13 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0xfffffffffffffff8, 0x1, &(0x7f0000000280)=[{&(0x7f0000000180)="19f83e2f3c1a58cc90481b1bfdd674fa971b20855f9868e7ee2ce432b41d600b7b62843776ad6420b080cb8b347eb57a53a60bae94610d474cb85599f1ba97385493fb2d8d18da4d265628aa3c398d0953204dd2048ffda079a744f3726f55381f6b0de7c197812b0cbf3b9c89f3af4a54cb8860c878feea59203105c7c6bdee3b7d0508d35aef36394b789f8e479c9a850adba99eaac2e6e393c7d49cf3c08964064fece69ae467e55fb47d68a83033e9518e0b1b0e5ee15d18db228d74154afb5e34e6e6945183cfc03ce9b12fdabce9bbcc1e65a4a359463d45803cfec1350d4fe2657c8d", 0xe6, 0x5}], 0x108000, &(0x7f00000002c0)={[{@huge_never}, {@nr_inodes={'nr_inodes', 0x3d, [0x33, 0x65, 0x25, 0x74]}}], [{@obj_user}]}) [ 2884.549161] FAULT_INJECTION: forcing a failure. [ 2884.549161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2884.551084] CPU: 0 UID: 0 PID: 41007 Comm: syz-executor.3 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2884.551122] Tainted: [W]=WARN [ 2884.551130] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2884.551144] Call Trace: [ 2884.551153] [ 2884.551161] dump_stack_lvl+0xfa/0x120 [ 2884.551205] should_fail_ex+0x4d7/0x5e0 [ 2884.551240] _copy_to_user+0x32/0xd0 [ 2884.551272] simple_read_from_buffer+0xe0/0x180 [ 2884.551315] proc_fail_nth_read+0x18a/0x240 [ 2884.551343] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2884.551370] ? security_file_permission+0x22/0x90 [ 2884.551408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2884.551434] vfs_read+0x1eb/0xc70 [ 2884.551465] ? __pfx_vfs_read+0x10/0x10 [ 2884.551491] ? lock_release+0xc8/0x290 [ 2884.551524] ? __fget_files+0x20d/0x3b0 [ 2884.551560] ksys_read+0x121/0x240 [ 2884.551582] ? __pfx_ksys_read+0x10/0x10 [ 2884.551620] do_syscall_64+0xbf/0x360 [ 2884.551665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.551696] RIP: 0033:0x7f9badbcc69c [ 2884.551714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2884.551735] RSP: 002b:00007f9bab18f170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2884.551758] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9badbcc69c [ 2884.551773] RDX: 000000000000000f RSI: 00007f9bab18f1e0 RDI: 0000000000000003 [ 2884.551787] RBP: 00007f9bab18f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2884.551801] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 2884.551815] R13: 00007fff5d42854f R14: 00007f9bab18f300 R15: 0000000000022000 [ 2884.551849] 12:55:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 3) [ 2884.644585] loop0: detected capacity change from 0 to 264192 [ 2884.672613] loop0: detected capacity change from 0 to 264192 [ 2895.063454] Invalid option length (1047482) for dns_resolver key 12:55:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 29) 12:55:24 executing program 2: keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000140)) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc, 0x7ff}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:55:24 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 4) 12:55:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:55:24 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:24 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0xc04a0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='rpc_pipefs\x00', 0x80000, &(0x7f0000000240)='*.\x00') sendto(0xffffffffffffffff, &(0x7f0000000400)="9570da385c44359f5de651bb149a1316c706ec1e82f76156f5c499743f31718017c30f2e2fc8ee35c35d5dac92b1a8a183816490da65433e27", 0x39, 0x20008800, &(0x7f0000000440)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x8, @mcast1, 0x2}}, 0x80) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d0f857e5ef62c5ceb460a866be7c02ffc60faaf3b6974dd5afe423c99941a443b06eba0f200c8905f901703b4d7a73c2d8c314762388be6bd6ab0495e1a24b68dbf6157759d58895de69b020dc4789b248391118dad2c12cf", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) sendto$unix(r1, &(0x7f0000000280)="bd540fdf0a2d9a7bd13adee6bb415f3aafda967abfc007ccc5c55abec55f0f53e0449dac0e70939d461a004d8a33db3493eaa8f6463a2ca3e6c7c29e221f317e2b6ca81710e37da03bc849a82d3548c87d6c4480f0a5776047ba900fda0f9a1adb33b19c07f16fac2d99db834951f2b0c0c72fb3f196baffc1faec5011ccded4f8064a670f47f06a3eded574c10857b80bb9b1280d72a026d1f455d931943b16e3c993e1b28d2048373a3ac0913d4f79d7e8eb643144fdfb7151827fc9753e87deaa5e2d81ff3850baf2359a2c31f44313d46202e746a46048", 0xd9, 0x90, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2f74652435820a8d8d3b90982616d093bc7157331b798d6536cf98839fc5308304204be732c1920ade0a5d270e84931e2484e84ab4b64cce9f922ed4a04631be03f3296a7d70ce83bb637cc824aac3b5e103c8b3a6b12c0f8ca32bb3a770b6"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0\x00') 12:55:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f00000002c0)={'syz', 0x2}, &(0x7f00000004c0)="bc787a29970c6adaa12207f73e05d5e91d8a1100150792915e475a3b3142aea1323c83dd2b070566bd5b4a1cf84f51d114c8ff1237d8985d17d368d900343cbc820b309e152c570bccb39757ff40d8e463ec8a2b5341c86b0a9394959d137081a72fdae9571c85d7b316ca9f000c9082e9", 0x71, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:55:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x6, 0x9, 0xfffffff8, 0x0, 0x9, "a77660812d55c7a8e9a8514906c3ecd4067230", 0x1000, 0x4}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = syz_open_procfs$userns(0x0, &(0x7f00000000c0)) sendfile(r1, r2, &(0x7f0000000100)=0x4, 0x5) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) [ 2895.085190] 9pnet_fd: Insufficient options for proto=fd [ 2895.094324] 9pnet_fd: Insufficient options for proto=fd 12:55:24 executing program 0: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002600), &(0x7f0000002640)=0xc) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000002680)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) mkdirat(r1, &(0x7f00000026c0)='./file0\x00', 0x9f) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x7, 0x8, &(0x7f0000002500)=[{&(0x7f0000000180)="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", 0x1000, 0x8}, {&(0x7f0000001180)="7fa325f7f763826fa7998b4ae8ff6e5801187db4840f31c15500e8bd887a6255d1f27159a45a245e6edcd05e2c24c38722163d7624c46b92a9ad0a12947ad6667bbea019658fa75abe3ed064ca3c4830badcf107244cf6adbaf09c993c25a89f40df61", 0x63, 0x800}, {&(0x7f0000001200)="e9c341d56426e9fec620148832fd5c583e8ad96f0d400f", 0x17, 0x4}, {&(0x7f0000001240)="184f8b6e26d9fafea86a5f56", 0xc, 0x4}, {&(0x7f0000001280)="ce1df48057d810f5aae9d13bc8e7ca9c6fcc6fa428037d755b8f3206c40bf2871e1ae21d992b457994f76fa6975cb206c9084a60ba0172f8ef7b54bf59157e52e2bf88b1886901e418b098326b82999f1c27e9a349948e99e1cdd2e66079c8813f69f6ae6858f791a7a89dee5212373e20e00ad044ff4390eec4f01f4433f101081ac983d057ff3dcdca507e28c5d12fedf046b14b85507e589d70a90811fe6c56830c2016b3bde712c50ca22582f215fe3cc1bf14ad00e47e35598f2e81ff282e822e5d8ce3f99da8cd88453bc8bc406d454bec4a46c7db91e1412932d7a41b78af4b8605600a94", 0xe8, 0xda5c}, {&(0x7f0000001380)="f09fab9ff8296651ec31ec5bbb5550a2f1fd2902c69555071a0796441c1026ce37d1ee695a51a092a7d15b7816a08e7368ea98a6651c7f29924e0932c072b7851dfc22800a639eabcbfbe328315dce6a", 0x50, 0xfffffffffffffff9}, {&(0x7f0000001400)="6e454843915ad50df7b0bd32a1affe73dd46c0d2d9f87c791d9be0e5a28efe9e12dcab4ed3a236ae56b2d45219cc63ac8dd2c57b613ce5334d59f4b8873a6eac324620d9bebbb0113229f434a6361c27cefb018c03ba3ce6273b01b5ce99e2c7836053b72b63f046dbe8eb56fc825d85ce06e0de400a61bc64e50ba46466eddcf31a786aff96868346db406809cf6a23882ef95036a2c2163e5da4eb21ffef501ef99103c8deffd262c37c84cf00596d4d379039b2618eb20f90b9102e9f832490bd96b79703850a7ee3044d4fbd4210f7b7a1d369c5af67ad9992df75b24e8d0164e8453c5875f29951e85ec77aa4b226eea647bd99e2c5c62c77286ee050a9b7e44b6f965737c9680a6e559ffb39d97c34753011af4e5665cfc1b2dc8b803a3bc4115c41a56821a22119554032c104621dce336cee85544782f84ee6103b0943ea85cc446a8746ed4fcbeda8038e2e0548c473bb7e4462999c2bd84c56ce4e925094a1a92ba4e030bcc99b979b6cc927fd29d4f794599fae34e07dfda41f4cd7e03d1efe2015310064289c9328570d20260b797319600a549dda7d35d41fe84b4eff293e27e97361c3ae2244be6f99582ff8fe5a4ceb20e815816397950dfb92cf29a638ef224ec6bc919d8f64f9135312bdbee51a32e39662dca2f61d45874cc073e140af109bb1f4616e7057f477bfd80904beeca3fbf8f95c7d258a19d030cb27316ff4ead26571cc6f51d5313ddba43f06c4e6fa29c6910d35ebf40254e013789241387d862753391b047d1d270c973d27fdd019d00b3ac77e72c05c53526c508fa62474a3506a0202b184bc07052712b72913d4e84ae498cd7cb40ffc744d8b56cd918b3b1256cecc874bcaab9452226d9926a4c17b10a16c2995397ea5d34bfc772e43b0528387f94a6151ad1e9d5c9f5be453638bf51db0d602d58a5341ffca35232a923348d280b451fbede34ddb02e47b0e11ae63797cbc2686f3faace623614b92c708d46c7de5f41bdb0272ae69b199ab8733d160f5047d41ed2dcc7cbc556b9e78bed6cae6716041ceb54510a98303c64ff955df826d60a7137151dcd2e2bdbe05be747e2c7d7ef86608c005d992fda6f9631f82fb0fd5f9c2fa715bd7094af0780ccbdf5cf22d04fa0b81e7e257f09f2b1fba32aece520b1e8cf4dd7a8072c3b221f4998ff816728342f9b40d2988ea3ad0c89271e2012d74eb5096a80f61dc3cf3b93a37c8b68d8c31ea7e9c051ce8f10bd308ab5707850570a5af6413024746e39466e29fea9a9c9c7406b8ebfd828a334ad16d0a856b9497a469a00ae22b41b256e2c6b46430dbd218b5bb487985c32e5e211fd7839f8e3d78ef842d885b3ecd78fe101828f0adf12380ddb8bbea41fbe9516a220540f2bc4091ac8ac6cbabec5b6ef31e5b8b61143946f0d5b676f2169854ffbb91498d1db56f4fd16d762812a8782341ddfa0042694f371ecddda61b40d715c18a7a8a3632663dc8b54b6cb6f5bc125f09e84dd5b73040f13b2d87dbe96ed57a38b550ba7f632791688c51208028a306c3cacbf795f89b67246dbbac7e71be1a12e7a24f692a2301135b4fab9d37e446143f09182a565b8f098ba3ce00ee252bcb0a6d9fa97cc0d583a20f4445ef0d29752f919daecdac342cd25380ab13d8a2fc3eec08ed04addd5fa1d2f4354c83f2c68c70bcaa5b93b3decb75254b245f7ac361a5295d6e834dd4b5981afd2ba96aa12f34e060e689abd24ad74f6ee528a652a796803d20f80bfb6c3cc582e29bcb73b35f9018dfed91dd2a56a0090b44f6f4e5dfa314047c130048aa3ae8190851b67f2ddaf9b753cbdf7e258b8c25354ac7d1f4ac298db182b195e67a88bdbd0adc667cfde59b17d7743d7e3e16eac190a0f71619517385ac8fb4eb5ea5d0e036bb076b96cb29e72a57b786a700039603add63b1cd468db58262a2c2f2aaaee3d1279f0635443bd20a80dbe6e2e9847b940d7397a730260a58082986eae5de15230c515ef868cd4b075afc2ca77f3bd5f3494bb867a294d1ff7dff447193a0bef157f80e6bdfa2d36c799719a87a72f85203b78c152536af5901bbe2f5f82ed15074f938fa8fa749f35c5c16c23a883b1f0a7a0da90c5f98bf3192d6cb551851240ef440b87f60bf58e869f8697f0ed2136074b03fab9e9cfbc1eddad83cfc0a927d0b7f859cf4df599c477095b07f18cf044bda5ca7de5db261d4b9d8a9d3d5d3a75c3172d07466c6df390d0ccf2dfc24acf23bd8f9226dea21f29daad0a091d1c020b4f5f41493b2282cb84b2a58b717f482420051bfa54a17fca2e1f244574fdad19a56c0b86a936cd456d063f6b79b89cb022ca920c736c14c3b32b41f751a28dacf1abb4f49cd3075d81dc83d71a0880809452ae1d3d3dc6cf42f31af98129008c517f1591718db28b72b8d8541ed7b8cee911e0fc419117450ed26cee43c42953a318aee2748033eabe1e84aeb91f74ef3c0c68cff741440a065b30d2f8e082444ea73df9265d469ad87f8ef481502df8310f35d46a96617bd5d31be2b4aea7c3f55f8d6dc89b324328d2e249830bccf91566dc1c21ab32de7534057292bb25251e8b5329b825fe6dba83b2439005d0f50037251341d9a9b813b368be5276a95f3c9c7c230309f9bf32e6f100fe03fba61f53db554a84cdbcb49dbbf642f1ac231dd859e6d9d3c60b5754556e0d46f25a42321d8d383e1d48cd2ac44947e0359a95bee26980b0eb53da9eedd19748b8a7fe6530608450bf660252bcb9922173164bbd39d975f5c36dd0468a1ea757651c60b95b6eb79bbae2b51ca7156797c71b222dcf01a44e508674a71a262e1afea4c7a5785362f618a1981c00d7de7f356476c9e01944a7030f81fa198f078c9c09be78f45cf105528db3128b7d0900d113b52b3c6b9c0408fc027d02a003ef26691648ca83fde45961a3abc0f750d39e5ba20fdb7b51e76c9e021eb7b6623a5bffb6e385de1cd1536a230c08c5838049dc7df6431aa1c878305004a08af55ac1ad5af5864be021e6a64302a69b28cebbf3ffefa0d1ef0efcd618bb8f47e787ae52ed9bbd340df71e6495f492b3a982090987497989fa2ccfed15c00a87941703f22927e4c10c9fdac500e5a80aed9a5308073faf6c83061b4318a7dd2e39db46931c67b88e7af5bff28df48bff1c55700a886b4005a585e127e9f58820ce0447e9e6b539426db91204b2b59e6bc8bcc6ef4f7b9a15266a549a7e1cf31adf5fffcab724e71e560b7746029cf49ab90718ed88d40966e9a491c4468c67a955c2cebb2595287efdb34917ce6f6b46642c42c981c42a3e0330ce188027597917c5c2db670bded3bd96f172fa32f0b096e57eaaa6f3dcab3c626b2be9b1008a15b1787aebb2caadb102434e036be754389c1eb60de8634ee712650f78254b29a6f4c8d05adb0cc27d21ed710b1d2e22030cadccdd41c5765a0b64d9e8483722b87a780a41ac5dbb62a4e5e3a07d7e5dfd3e77408ea54be7ca055f0dabf2e6a60ee940735ce295f9f150c3cfe1d49e201fe6ff646c754d916141001746e26299450eafb33da5f97843c2cdaf52ad3fd001039edca8c81fb9f3590ceda2a08736b48163c45580db1e65e6d057ec3bd6863b53764b87f0fd5c131978478c8cbb9bf21e2379a6e442c101a38646e1eda2ce411ddef1e8f497cdcd4e3abebee9959a6163d1096ffa188d351cd2663480fe37f84c2938a44824237ac0a5736d13c2f73c32ee3d229b4fceb18ef01f3e742f0a8ae6c52da6281e67b2bafe46cb060bea435f0635ffd76b6032417408ba391c9cfc444f6adf35575eaae9c0f090c3d3915c5e0b63af6320e147ad7587e5f10dbba20256f60184c7fe83dbd535e7410873b7beecd13615f12b09b1aca20f518d0e74c9dd3f63fdb48508ee27db8b701c85a7ce38ec002aaa5b8880a6960bd8950c1b4f1836fdb62ff4a413b0e26f5c34d3e704f5c7048c892b59cd1e0dd24bab75d008896a0404ec5f258129e9feca690f6282e792b2407f7852d30c053b188bd7f06329ace5e6e9e746e3ca6f3c6a0e70d38806c4a721370486df52ed735d555d5628532084090f3ff789b75183289ade96f716e05d8b667b2ef107a81061ae7cfe551f77112c013972435336aba61e84cc59a1eac3cea61c1bfbd1cdb5364c7017852988f929166f910159f43013b23461bf1fb775be0914f49b5cba2280736a76db08b1568c0f5c44b2d85f39e67b236c1b7c41a8cc327901c62ad9a0cf954110d675f9b99964d83d6fc025c75a7b34023c99371b6fc031a7f66032f9ba921f91549a162ec5a00466ed598ede42fb4e86945a5ae35a71929989f75160edba32125e45846d4f735431b9dac9ffb8f1b95e107ce64d9afedeb0e8510bbe9deb89f661e6530800d1e0ba52ea52e89eb1d1e6a0166652de5f2daa14921d1c7b3a0f737165ae8cc6db2a5d93ccf58dfa9409dfbaeca8a060287525c8e0a38c59aed6310c439ed15be77994a7399435cbfca09a22cec65b54ee03dcf88a35234e755fa1aa4b8adf5a9c736a55b990b74bd1add3e88f988212b74b8b64688e742f4baa808bf7c4ff9ae283d59a0fc9cee578b09c65182b4da65ac1eb34d217d368f006093149236ac733e433000df5dfacb9d8a0160b74d024f99719b1777a5ee4f7787952a7796d72cd6a1a67e6f0f5cd4bef7d9cb84a794ea7e7b2dc753f7fecfe9e50dd8a5bdfaa58f56d6ebfdf92696171f1fe307b995e7a7d05dd5bea1b8dc665823c50dfe3021f06ccd7c4dd7bda2292572e4ee67db25b5a6160e9f52b7eaacd21fed6131d81d304405af70179514f221469396a3b16f235f87ca09f40397065126925f1ad8dbf4df74fb2df6ef6691158189ff5de51d3394ca1ad74adc0a3ed03c3cfb3ad453b35e6a767c6a032be48e8a86ef2ac165f2253bc432dee0ca927d5260813a29251afd542b5ebb60f0de1a2976c544f66151075dc43202a7c617606bcdc2a584fdfcd043f6a7dbdf2edbd60ab1c0cf210e34ee005cec32c2c1dd05ec99e059ee6938a9873a5a88e1018583799091c377686c206772209706937c2ca864e0ed788abeb9a8b3bae25fb0f6bb9cd1f332712245abc974760ae27aa714866f7e914fd37b7ecc602234597c1c9a21c746b4ea333c7fc2c0abe980ef9b3e7f2447cac1db7c248bbefc83826cc31617b59ba6d8f136c8e38ab57ef3383618159eda6b9ae6a23eed246a05731f2cf758e4f738cab6c7035495a707c597f5f723f6ba7f6b0328e8c36f395125f92898e192a21920d72e54979c48442db4132b94e57fbb98740bdb620b1d128821688e2c2cfa974ca087777b6e6424465e53eeee5353eaf37dfaab8ae7178eb271cfc99d483387e4652bbc58e758ecb32528f68ab36fb678e844da49a96850efddaf1b9ed62211755321fef00021ad7d9ba99e32e5d09b719fa5c5d1540f0eee819d428e3b29bb53249971f6ca20f171601199d03f089fa5bf6575ac98d260c68004b8853dac80d0d955169644060083c0f3b1b4995e2dd1b0d4e2ee31d008be4fd77509f3dbecb53056a9fbdfa6fb436c51d0eebd63865c68481db4d173dc050a57460b1d48605342b70014abd612d1e97740bc66d3275acb23847f927d64a9fecd78dc026e95a510a93ee762c1f14bd2cb388642d47a26611b340407a3ed691fd569bf3b89211abbd383957bff10a98e728f107b47c37341700c629955538ad763e578eda148f83712c4b65231e398f1520bf6888317dba7c39632d5415c08a7a3a37d79ee2", 0x1000, 0x9}, {&(0x7f0000002400)="8492b725b018c10104b468050762a4ecb929e5bb5c305083ac6fcc2a7039a0366b6d4f5f2091040d0bea94ff4dd78aea5f0204d461c5b90fe29adea9d75d288cba532a395e15275879afa1982dc40f0cce71219446d42566cd5964dd13c551ec8d69c3a7c8fe9eae1447763ea0f5db6b206ac3a27fea2e1ffe4a8921401922adc5656bc2eddb579be9843ceb1736036d02f8efe83a907f31bbd6a873af6552b7bfe44452d3c9d23dd2071214524ede3f6446e1ef8e2ee11f9bd7b6d3a0ebeb986a7259f37fb088", 0xc7, 0x1}], 0x2000, &(0x7f00000025c0)={[{']'}, {'debugfs\x00'}, {'/dev/nullb0\x00'}], [{@context={'context', 0x3d, 'root'}}]}) 12:55:24 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2895.153914] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2895.153914] program syz-executor.1 not setting count and/or reply_len properly [ 2895.157497] FAULT_INJECTION: forcing a failure. [ 2895.157497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2895.158590] CPU: 1 UID: 0 PID: 41246 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2895.158645] Tainted: [W]=WARN [ 2895.158656] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.158675] Call Trace: [ 2895.158686] [ 2895.158698] dump_stack_lvl+0xfa/0x120 [ 2895.158755] should_fail_ex+0x4d7/0x5e0 [ 2895.158781] strncpy_from_user+0x3b/0x2f0 [ 2895.158803] getname_flags.part.0+0x8d/0x540 [ 2895.158823] getname_flags+0x95/0xe0 [ 2895.158836] path_setxattrat+0x25d/0x290 [ 2895.158850] ? __pfx_path_setxattrat+0x10/0x10 [ 2895.158865] ? lock_release+0xc8/0x290 [ 2895.158883] ? __mutex_unlock_slowpath+0x157/0x750 [ 2895.158903] ? kernel_write+0x643/0x660 [ 2895.158919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2895.158939] ? __fget_files+0x20d/0x3b0 [ 2895.158956] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2895.158970] ? fput+0x6a/0x100 [ 2895.158986] ? ksys_write+0x1a3/0x240 [ 2895.158998] ? __pfx_ksys_write+0x10/0x10 [ 2895.159014] __x64_sys_lsetxattr+0xc9/0x140 [ 2895.159027] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2895.159040] do_syscall_64+0xbf/0x360 [ 2895.159054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2895.159067] RIP: 0033:0x7f4505a39b19 [ 2895.159077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.159089] RSP: 002b:00007f4502faf188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 2895.159102] RAX: ffffffffffffffda RBX: 00007f4505b4cf60 RCX: 00007f4505a39b19 [ 2895.159111] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000040 [ 2895.159118] RBP: 00007f4502faf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.159126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2895.159133] R13: 00007ffd480229af R14: 00007f4502faf300 R15: 0000000000022000 [ 2895.159150] 12:55:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 30) 12:55:24 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) r3 = openat2(r2, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x690840, 0x182, 0x10}, 0x18) dup2(r3, r0) 12:55:24 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(0x0, &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0002, 0x0) [ 2895.253278] loop0: detected capacity change from 0 to 16383 [ 2895.294332] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2895.294332] program syz-executor.1 not setting count and/or reply_len properly [ 2895.305552] FAULT_INJECTION: forcing a failure. [ 2895.305552] name failslab, interval 1, probability 0, space 0, times 0 [ 2895.306697] CPU: 0 UID: 0 PID: 41394 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2895.306722] Tainted: [W]=WARN [ 2895.306726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2895.306734] Call Trace: [ 2895.306739] [ 2895.306744] dump_stack_lvl+0xfa/0x120 [ 2895.306769] should_fail_ex+0x4d7/0x5e0 [ 2895.306785] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2895.306802] should_failslab+0xc2/0x120 [ 2895.306819] __kmalloc_noprof+0xc8/0x6e0 [ 2895.306838] ? trace_kmalloc+0x1f/0xb0 [ 2895.306852] ? __kmalloc_noprof+0x29d/0x6e0 [ 2895.306869] ? bio_kmalloc+0x3e/0x70 [ 2895.306883] ? bio_copy_from_iter+0x192/0x270 [ 2895.306906] ? bio_kmalloc+0x3e/0x70 [ 2895.306920] bio_kmalloc+0x3e/0x70 [ 2895.306935] blk_rq_map_user_iov+0x390/0x1180 [ 2895.306960] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2895.306982] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2895.307002] ? find_held_lock+0x2b/0x80 [ 2895.307020] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2895.307033] ? lock_release+0xc8/0x290 [ 2895.307046] ? import_ubuf+0x1be/0x220 [ 2895.307064] blk_rq_map_user_io+0x1cf/0x200 [ 2895.307084] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2895.307103] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2895.307126] ? irq_work_queue+0x9c/0x100 [ 2895.307143] ? __asan_memset+0x24/0x50 [ 2895.307159] sg_common_write.constprop.0+0xd75/0x1710 [ 2895.307178] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2895.307191] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2895.307208] ? ___ratelimit+0x465/0xa10 [ 2895.307231] sg_write.part.0+0x6a2/0xb50 [ 2895.307245] ? __pfx_sg_write.part.0+0x10/0x10 [ 2895.307259] ? perf_trace_lock+0xb5/0x5d0 [ 2895.307276] ? __pfx_perf_trace_lock+0x10/0x10 [ 2895.307294] ? lock_acquire+0x15e/0x2f0 [ 2895.307308] ? perf_trace_lock+0xb5/0x5d0 [ 2895.307321] ? find_held_lock+0x2b/0x80 [ 2895.307339] ? get_pid_task+0xfd/0x250 [ 2895.307353] ? perf_trace_lock+0xb5/0x5d0 [ 2895.307369] ? avc_policy_seqno+0x9/0x20 [ 2895.307380] ? selinux_file_permission+0x99/0x600 [ 2895.307401] sg_write+0x86/0xe0 [ 2895.307413] vfs_write+0x2b7/0x1150 [ 2895.307427] ? __pfx_sg_write+0x10/0x10 [ 2895.307439] ? lock_acquire+0x15e/0x2f0 [ 2895.307452] ? __fget_files+0x34/0x3b0 [ 2895.307467] ? __pfx_vfs_write+0x10/0x10 [ 2895.307479] ? __fget_files+0x203/0x3b0 [ 2895.307491] ? lock_release+0xc8/0x290 [ 2895.307507] ? __fget_files+0x20d/0x3b0 [ 2895.307525] ksys_write+0x121/0x240 [ 2895.307538] ? __pfx_ksys_write+0x10/0x10 [ 2895.307557] do_syscall_64+0xbf/0x360 [ 2895.307571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2895.307583] RIP: 0033:0x7efff4616b19 [ 2895.307593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2895.307606] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2895.307620] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2895.307638] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2895.307649] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2895.307660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2895.307671] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2895.307689] 12:55:35 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) (fail_nth: 5) 12:55:35 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x10041, 0x0) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='efs\x00', 0x9000, &(0x7f00000002c0)='\xec/*\x00') mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f64073000000ab80aa6344e6cb1ca725ee558b50000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x7) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:systemd_tmpfiles_exec_t:s0\x00', 0x2d, 0x1) 12:55:35 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:35 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0008, 0x0) 12:55:35 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/137}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000280)={0x20071026}, &(0x7f00000002c0)={0xa2d, 0x8, 0x1, 0xfff, 0x6, 0x4}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:55:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 31) 12:55:35 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = dup2(r2, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:55:35 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) keyctl$setperm(0x5, r1, 0x22000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2906.071068] FAULT_INJECTION: forcing a failure. [ 2906.071068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2906.072124] CPU: 1 UID: 0 PID: 41474 Comm: syz-executor.5 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2906.072145] Tainted: [W]=WARN [ 2906.072149] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2906.072157] Call Trace: [ 2906.072162] [ 2906.072167] dump_stack_lvl+0xfa/0x120 [ 2906.072194] should_fail_ex+0x4d7/0x5e0 [ 2906.072216] _copy_to_user+0x32/0xd0 [ 2906.072235] simple_read_from_buffer+0xe0/0x180 [ 2906.072258] proc_fail_nth_read+0x18a/0x240 [ 2906.072274] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2906.072289] ? security_file_permission+0x22/0x90 [ 2906.072311] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2906.072325] vfs_read+0x1eb/0xc70 [ 2906.072343] ? __pfx_vfs_read+0x10/0x10 [ 2906.072357] ? lock_release+0xc8/0x290 [ 2906.072376] ? __fget_files+0x20d/0x3b0 [ 2906.072397] ksys_read+0x121/0x240 [ 2906.072409] ? __pfx_ksys_read+0x10/0x10 [ 2906.072429] do_syscall_64+0xbf/0x360 [ 2906.072444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2906.072458] RIP: 0033:0x7f45059ec69c [ 2906.072468] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2906.072480] RSP: 002b:00007f4502faf170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2906.072494] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007f45059ec69c [ 2906.072503] RDX: 000000000000000f RSI: 00007f4502faf1e0 RDI: 0000000000000003 [ 2906.072511] RBP: 00007f4502faf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2906.072519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2906.072526] R13: 00007ffd480229af R14: 00007f4502faf300 R15: 0000000000022000 [ 2906.072545] 12:55:35 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) [ 2906.124064] audit: type=1400 audit(1756817735.319:24): avc: denied { associate } for pid=41470 comm="syz-executor.0" name="/" dev="debugfs" ino=1 scontext=system_u:object_r:systemd_tmpfiles_exec_t:s0 tcontext=system_u:object_r:debugfs_t:s0 tclass=filesystem permissive=1 [ 2906.131919] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2906.131919] program syz-executor.1 not setting count and/or reply_len properly [ 2906.161018] Invalid option length (1047482) for dns_resolver key 12:55:35 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs\x00', 0x2002, 0x0) 12:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 32) 12:55:46 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:55:46 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed000c, 0x0) 12:55:46 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x2, 0x0) 12:55:46 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) uname(&(0x7f00000004c0)=""/220) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) add_key(&(0x7f00000001c0)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) munlockall() munlockall() 12:55:46 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x1f63, 0x1000, 0x8001, 0x0, 0x400, 0x8}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:55:46 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:46 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x7) [ 2916.957285] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2916.957285] program syz-executor.1 not setting count and/or reply_len properly [ 2916.962388] FAULT_INJECTION: forcing a failure. [ 2916.962388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2916.963304] CPU: 1 UID: 0 PID: 41801 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2916.963324] Tainted: [W]=WARN [ 2916.963328] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2916.963336] Call Trace: [ 2916.963342] [ 2916.963350] dump_stack_lvl+0xfa/0x120 [ 2916.963378] should_fail_ex+0x4d7/0x5e0 [ 2916.963398] _copy_from_iter+0x1dc/0x1660 [ 2916.963416] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2916.963431] ? do_raw_spin_lock+0x123/0x260 [ 2916.963450] ? __pfx__copy_from_iter+0x10/0x10 [ 2916.963464] ? find_held_lock+0x2b/0x80 [ 2916.963482] ? __create_object+0x59/0x80 [ 2916.963502] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2916.963519] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2916.963533] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2916.963552] copy_page_from_iter+0xe3/0x180 [ 2916.963570] bio_copy_from_iter+0x108/0x270 [ 2916.963596] blk_rq_map_user_iov+0xc07/0x1180 [ 2916.963620] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2916.963646] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2916.963665] ? find_held_lock+0x2b/0x80 [ 2916.963682] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2916.963696] ? lock_release+0xc8/0x290 [ 2916.963709] ? import_ubuf+0x1be/0x220 [ 2916.963725] blk_rq_map_user_io+0x1cf/0x200 [ 2916.963745] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2916.963765] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2916.963786] ? irq_work_queue+0x9c/0x100 [ 2916.963803] ? __asan_memset+0x24/0x50 [ 2916.963819] sg_common_write.constprop.0+0xd75/0x1710 [ 2916.963838] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2916.963852] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2916.963868] ? ___ratelimit+0x465/0xa10 [ 2916.963890] sg_write.part.0+0x6a2/0xb50 [ 2916.963904] ? __pfx_sg_write.part.0+0x10/0x10 [ 2916.963920] ? perf_trace_lock+0xb5/0x5d0 [ 2916.963937] ? __pfx_perf_trace_lock+0x10/0x10 [ 2916.963954] ? lock_acquire+0x15e/0x2f0 [ 2916.963969] ? perf_trace_lock+0xb5/0x5d0 [ 2916.963982] ? find_held_lock+0x2b/0x80 [ 2916.963999] ? get_pid_task+0xfd/0x250 [ 2916.964013] ? perf_trace_lock+0xb5/0x5d0 [ 2916.964029] ? avc_policy_seqno+0x9/0x20 [ 2916.964040] ? selinux_file_permission+0x99/0x600 [ 2916.964061] sg_write+0x86/0xe0 [ 2916.964073] vfs_write+0x2b7/0x1150 [ 2916.964086] ? __pfx_sg_write+0x10/0x10 [ 2916.964099] ? lock_acquire+0x15e/0x2f0 [ 2916.964114] ? __fget_files+0x34/0x3b0 [ 2916.964128] ? __pfx_vfs_write+0x10/0x10 [ 2916.964141] ? __fget_files+0x203/0x3b0 [ 2916.964152] ? lock_release+0xc8/0x290 [ 2916.964168] ? __fget_files+0x20d/0x3b0 [ 2916.964186] ksys_write+0x121/0x240 [ 2916.964198] ? __pfx_ksys_write+0x10/0x10 [ 2916.964217] do_syscall_64+0xbf/0x360 [ 2916.964230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2916.964243] RIP: 0033:0x7efff4616b19 [ 2916.964253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2916.964265] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2916.964278] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2916.964286] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2916.964293] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2916.964300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2916.964307] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2916.964325] 12:55:46 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000", @ANYRES16], 0x102, 0x1) 12:55:46 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x8, 0x0) [ 2917.088292] Invalid option length (1047290) for dns_resolver key 12:55:46 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x102, 0x1) 12:55:46 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x8, 0xffffffffffffffbe, 0x0, 0x10005, 0x0) r0 = fork() capset(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000000c0)={0x4, 0x2, 0xd5, 0xffff, 0xfffffff7, 0x8001}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:55:46 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x2180000, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='coda\x00', 0xc80, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='aufs\x00', 0x400, 0x0) 12:55:46 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed004e, 0x0) 12:55:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 33) 12:55:46 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x102, 0x1) 12:55:46 executing program 6: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x200080, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r1) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000040)=0x2ae8) [ 2917.309190] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2917.309190] program syz-executor.1 not setting count and/or reply_len properly [ 2917.327433] FAULT_INJECTION: forcing a failure. [ 2917.327433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2917.329178] CPU: 0 UID: 0 PID: 41966 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2917.329217] Tainted: [W]=WARN [ 2917.329224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2917.329239] Call Trace: [ 2917.329248] [ 2917.329257] dump_stack_lvl+0xfa/0x120 [ 2917.329304] should_fail_ex+0x4d7/0x5e0 [ 2917.329339] _copy_from_iter+0x1dc/0x1660 [ 2917.329374] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2917.329404] ? do_raw_spin_lock+0x123/0x260 [ 2917.329439] ? __pfx__copy_from_iter+0x10/0x10 [ 2917.329468] ? find_held_lock+0x2b/0x80 [ 2917.329504] ? __create_object+0x59/0x80 [ 2917.329541] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2917.329590] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2917.329617] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2917.329662] copy_page_from_iter+0xe3/0x180 [ 2917.329698] bio_copy_from_iter+0x108/0x270 [ 2917.329746] blk_rq_map_user_iov+0xc07/0x1180 [ 2917.329796] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2917.329840] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2917.329876] ? find_held_lock+0x2b/0x80 [ 2917.329911] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2917.329938] ? lock_release+0xc8/0x290 [ 2917.329963] ? import_ubuf+0x1be/0x220 [ 2917.329996] blk_rq_map_user_io+0x1cf/0x200 [ 2917.330036] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2917.330075] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2917.330117] ? irq_work_queue+0x9c/0x100 [ 2917.330151] ? __asan_memset+0x24/0x50 [ 2917.330182] sg_common_write.constprop.0+0xd75/0x1710 [ 2917.330219] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2917.330245] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2917.330279] ? ___ratelimit+0x465/0xa10 [ 2917.330322] sg_write.part.0+0x6a2/0xb50 [ 2917.330349] ? __pfx_sg_write.part.0+0x10/0x10 [ 2917.330378] ? perf_trace_lock+0xb5/0x5d0 [ 2917.330412] ? __pfx_perf_trace_lock+0x10/0x10 [ 2917.330446] ? lock_acquire+0x15e/0x2f0 [ 2917.330474] ? perf_trace_lock+0xb5/0x5d0 [ 2917.330500] ? find_held_lock+0x2b/0x80 [ 2917.330535] ? get_pid_task+0xfd/0x250 [ 2917.330562] ? perf_trace_lock+0xb5/0x5d0 [ 2917.330594] ? avc_policy_seqno+0x9/0x20 [ 2917.330615] ? selinux_file_permission+0x99/0x600 [ 2917.330656] sg_write+0x86/0xe0 [ 2917.330679] vfs_write+0x2b7/0x1150 [ 2917.330703] ? __pfx_sg_write+0x10/0x10 [ 2917.330727] ? lock_acquire+0x15e/0x2f0 [ 2917.330753] ? __fget_files+0x34/0x3b0 [ 2917.330777] ? __pfx_vfs_write+0x10/0x10 [ 2917.330802] ? __fget_files+0x203/0x3b0 [ 2917.330826] ? lock_release+0xc8/0x290 [ 2917.330858] ? __fget_files+0x20d/0x3b0 [ 2917.330893] ksys_write+0x121/0x240 [ 2917.330919] ? __pfx_ksys_write+0x10/0x10 [ 2917.330957] do_syscall_64+0xbf/0x360 [ 2917.330984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2917.331009] RIP: 0033:0x7efff4616b19 [ 2917.331028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2917.331051] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2917.331076] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2917.331092] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2917.331107] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2917.331122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2917.331136] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2917.331171] 12:55:55 executing program 2: capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}) r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000002500)={0x20080522, r0}, &(0x7f0000002540)={0x1, 0x2, 0x4, 0x9, 0x8, 0x4}) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x6, 0x0, 0x2}, r1, 0xa, r4, 0x12) capset(&(0x7f00000000c0)={0x20080522, r1}, &(0x7f0000000140)={0x3, 0x4bd2, 0x7fffffff, 0x5, 0x3, 0x5}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 12:55:55 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r3) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r3, 0x1b, 0x68}, &(0x7f00000002c0)={'enc=', 'raw', ' hash=', {'blake2s-128-generic\x00'}}, &(0x7f00000003c0)="31435234ad2a9fae1c3666d683abd592eb0a2c946cacc7e26a2fb1", &(0x7f00000004c0)=""/104) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:55:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x80000, 0x0) 12:55:55 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x102, 0x1) 12:55:55 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed00f0, 0x0) 12:55:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 34) 12:55:55 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x100000000, 0x630340) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) clone3(&(0x7f0000001380)={0x110000, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x30}, &(0x7f00000001c0)=""/85, 0x55, &(0x7f0000000380)=""/4096, &(0x7f0000000240)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r1}}, 0x58) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) socket$inet(0x2, 0x5, 0x3) r6 = dup2(r2, r3) ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 12:55:55 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x4c000, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r3, 0x12) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r4}}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004bc0)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = socket$packet(0x11, 0x2, 0x300) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004f80)=[{{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001200)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="b46489c0a4fc757c", 0x8}], 0x2, &(0x7f0000001240)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="3404000000000000010000000100000086", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0x20004802}}, {{&(0x7f0000002980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002a00)="33541c46b9eff56884782c4699fba30344810b51b676541da275e1ce294e641c288d81edde1e509268083c9757990190f47a66ce323847cd94f22ecfc7598f28b96b4803162f7d718755fffc4741904fc41e469c51724775c9f15c09c9191fd0d7daaf64053fee1c98453a9c81db4c3de1a90a434bbb0fc197965fd3eab13dfe763010038127e227fe3c316f9650f35ad164fd35655f7e16cd5a0ad4bc1c70aeece560e4c685298f78b2446c80b9fe7456b9aa5bd98366aeb1cfd77f633983ac7697e434b9cd39b8a7c4cbf1831cd6c72100bd1b92f0cd4ad3139d7cfab3c460c373cd3cd635f6070e1b370f278c737a465000", 0xf3}, {&(0x7f0000002b00)="ebf9730ae7a5625aff791d4f9177919332b4db90a6086519401b0e737570695194bb3f24f22a2f6638493b41924a9ecfdbb00cd8aa755beb8c3998b711", 0x3d}, {&(0x7f0000002b40)="c135cc7bccb982b047ba8edf86dcc801cf97a16a207c54651cb8d74f01703d20fdb16bde4666f0d99ee226f094f4c0e09b8cfba63c73f60b3a1946221b44e5ab3e64b15ac87f24b0220e1521c994098941eb94c214142be9e35adf9ce2cf4b54c24c2c44eef87e5cbba4a125b6f39fbed1f05cf5f3634be44ed7bbe7aa24d5bc3d262d013eaa4e291d", 0x89}, {&(0x7f0000002c00)="6cd5b231d0cbf676bc969481f6e7c1e337d993e0a5758134c1b3e22233cfe19faf9231c31b97bb44036feb9af922aa0248855e07ed37f862330ba28d87494bb33a24418c23e2db336103de18f446fbb370ab932f924ffd32a7b99060f6fa77700191e609bf3a8624108ec190603600b30e18290ae560b2f65c7db47d810fb5468be93397cd6df2d32b84787b89860918f9dbd88ce50a66f734bd2c13584f0df496ba603288822a9724e06194dde36431414a6a14fd3e02dd7466c15a2762a6c710f962353da66dedf11f18264016887beffbcc5157d6dec392dc6dbb119cc528a0f9ffc9c64aa12b40353a0fab7f", 0xee}, {&(0x7f0000002d00)="0865e6339be1b9febd7d6ab425b16b4caf64c3d8d56b689ec0869a66fe5e0331b791c2f267615649a648d27f6c17d2e6b8017508a4b1b3a35704d57d0433ded415f2b0dae9f2c619bf8b5c48e6080be70f0b889765ea3dcfb4c5a101dd03f50e14a8a83ad4b2b2b3c53c62c46bdde0e82979cde83914c9242ad5672818fb358c9382b454934e23a10a4286f024a9ceefe44d1f12f37be905830928f8c75fb5b376271f904077da798ddf78f4a7d69b8f8b6f0a41c19a0c009ad66c2e67c38265000c", 0xc2}, {&(0x7f0000002e00)="a61dc154469add1924f67ce01946c40a16ac52d0514e93c01ab8c4b683236b0a2139a674d05fe0cff50f57b8fd9ce8f841fe3fe6428974e9ecc698dd19fd7b3128e891310fd8f1d26f57db82e901732f411e2cf4c8b784fb48cdaf315aa2288a3034e7c270a9a97b1f27983b41d3ad8629766a75902b2c5f09faa2320dc3c234e8a0ac22b4bf7a1e29ead173d3c4a036dee52965a4da3403ceb230bccc48aec46729e81ddde255facc70cbc1457873314a6f4847463249864e14b97c091f42696dd57d064c0836", 0xc7}, {&(0x7f0000002f00)="c7bd579d4b10d851928da43ca89a26f2544eec3b570b56aff5a7119172437b9adaf4034b026c73d9dd58a5d3bef05a464722ba015a3ef342c691facd67a6d8c5144c09cb2f74ecb7ab82e4a7d0decc320fa5ebffa67600732a074dd25e4806a5a2f74e50905ede4cbe1ff05ae6eae7efeb2f45e3a74ff075bc6cf99bd981dd8281f910a17fa5c84dc8f2c6ecbb5504b1a24696e63f750db684ee4ef01a2bc259c71167984896772253ffe9", 0xab}, {&(0x7f0000002fc0)="f70f23648d98a98c49bc53d830a1c8f288a9f3a1fbd30d645f29d5e631603e3d05ecf33759075f82efdca2a6cf5800e66f", 0x31}, {&(0x7f0000003000)="80a51e1a2c05e96eb744e1b3fefe285c8338dfd48794159119c69f615834cdbbf111c3f41d112d82dcca0c69e78bc1ba6e31873dd6f1111ee9ec22b0a60e015fd683a141492564ba49126f75398aae829c3d20b41e269f1aba6a3e9bd04370c1efa33a6e08176d9cf823e562db645996005e5f7d978dc1ed09d5cb79adbc175cc5fdf2225f05f6332f459abefeb91cca17de9108", 0x94}], 0x9, 0x0, 0x0, 0x800}}, {{&(0x7f0000003180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003240)=[{&(0x7f0000003200)="039d0343828dedfe6926c38aa20e8da405e04c8091bb8c5bf156225f86d63de1b035e3870f4a35d2", 0x28}], 0x1, &(0x7f0000003300)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x40, 0x8040}}, {{&(0x7f0000003340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003440)=[{&(0x7f00000033c0)="e41f918408241c68eeb429fcdb07b5f10e3fed97d009f979c371972ae74bb5c0fcfd0a9caaf00b106ac1fa54f3ad1f73505f881b3e8ca215f6584083f055df000b21ffb4d7dfe83c59867f9e38759812e009be0fd93b", 0x56}], 0x1, &(0x7f0000003480)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x1}}, {{&(0x7f00000034c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000003740)=[{&(0x7f0000003540)="51bc2d8051987e4f21320bc9fbe8f4c182df95689c0f687786c9657d", 0x1c}, {&(0x7f0000003580)="cd792e3493d1871723f6e223d426d3f3c43a9fe7d2b4901d45a5635a04b5e93939add75948ce821c25efc29d85f3cc39f88e66f5f6469c3e51d38905f454bbd8d4d8ea23846d94b275b3974119b65f", 0x4f}, {&(0x7f0000003600)="547f58942ddda7ae93da4b508a25f59113883d341c12da4c0a673a28c839f7544ed91f8fb338ac4e266c9f73d36adce8b05446abec19e94aa5bcda7f595a508cf31baf0568fc503b", 0x48}, {&(0x7f0000003680)="34dfda2bd18725c1147fbdeb95ffe5c04528a55f69d5bd1577b1b21b643200646dff254398ec48f50f2768896b09ad247e27fa52f43673411e8d94394ab4eb71b9ebdf15553e22319a463462518fdb673f0a6494065f5f69ac0b18c40a6ece721efa9bd3e22e9a914587fe9cb1a631c24a579127b73ddf5933ba253a6e8f568f8d65b9", 0x83}], 0x4, &(0x7f0000003780)=[@rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x50, 0x8804}}, {{&(0x7f0000003800)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003880)="f96b0c2411cff613374cb62d10ce15fe10f5a859e5822518b822e6d6059e246abc178aeaa994ad793d5a6ce82dd2c99b19d4d623411dc7e4193cf79a08d838df39bd2d210faa3e7386df5b2e38c88e2d6c3be780e61b2e6aa30589fc5bc99a890781d5fe00344706cdd3ff1e865e5d42042b34cd7975962ef4e4a3ec67f3b8e8a95f84f6b8e3c05ef3da58c7b6ad06fdd15ba198c44d4cd7998873c39ced0d7c88278e61a7d5c97ed7e7de15ee1477e6fd7e6cf3cd43bec86c61fccb4d2b818d03ec4e610fff2ef87c16bdc998d17ac4dccf40b5717dbb743c6cc6fc798f91ea160239c20c572df10c", 0xe9}, {&(0x7f0000003980)="8738c66b32a2e13f13462f8af937a2cccf54ca5dcda5526baf6b63274680c3f14231b8c4a53b0ccea1b5badf7e06ef8479308863e24235a5ba7937747ec932b83661e48c37052788d02f210ff429c01039c9675886312b3077194e3629242e254270e39d69360a8231c0b75eaa04c324c62f9d05a5d6", 0x76}, {&(0x7f0000003a00)="688ea4f3633a40c041a25b84f5979ffb2d9109f836ffc4259ddea88fce68f9a7f5cacfc08d8f8953309b1acf9a27a34de4a04bd6bd4f85d7d371c858405c6e4f02c8e64271b054cdf8c1f55bc712430dc3733883f55a7208717b651bfa0b65259592e54ef5445c13de8497f0f5bd0ced1c12896daf16e92848521b7576e46b0a1f06f711e38c1efa9ba9faf8e73d64b8fd0502c7276433cadab53ede522f152bb643d77de93aefcf431ce2f1f2e9383020f9bb9a2ce1d72540b9cbb3560517259b34142201de6456c79fc54fa38f9ab9de0b0dd1", 0xd4}, {&(0x7f0000003b00)="a2cf64e78682dfb5b0950a016241bcce43c519b2fa1d72ceca55f5a2badbc432d8f959dc09755a1b5127d4eeab6031d3f3db2dadfa4d2fe047f98147c7da3a3fdfe5ac5f730fdf4034a8a7cf63641e2c96ef39f87c66f1a9166ed9e40cb72897618c0fd4d8fcbb374e8b58272a31eb884d6500dd043fc143897d6c6ceccb6e0b1d67", 0x82}], 0x4, &(0x7f0000003e00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x38, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf0, 0x40000c0}}, {{&(0x7f0000003f00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003f80)="f9c79d9336315e581dc159fdcc05ed868904dc18b50639dd9db9ce7eb14a202017913def8bf99789cc", 0x29}, {&(0x7f0000003fc0)="bb99190d7530a235544812ee0619fbacada64d483acba47e370fe1d644bf578af4e1bbe39cffb39f23fe777d22f92cfe26", 0x31}, {&(0x7f0000004000)="c05b1f7a4fd6d12f3db8e7e5c6d1d645bd2b619a1bd2df12a3a1e5691ecd08b1f6b275a201b50096cfeb942b86a6d315672c7268824d9db6d3b4ea2846439e22167b1358566776c832eef3c05dce3f0612e848f2678b1343145bc64fe9e48ac27f8eae3a873f84114a71ba7359841ee406b1db360e97256ef8af36d8147382fe62ca902bf0d52e98d126a71457545a2f0673c22f75b07049484629b52f04ec028e624763d42f2d8da22f56dcdc9cf6ddf47e0022795c4694184833083f47dd413904829e710feebd380f952ad7ae79c1b9d9e250061c24b396", 0xd9}], 0x3, &(0x7f0000004140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee01}}}], 0x40, 0x4004801}}, {{&(0x7f0000004180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000004940)=[{&(0x7f0000004200)="21055d35517218ce56de523ab812f541b545ab63ffa04e982a35b04f86a34bd85c3ae2fa7ad4a7fdc912faffaa300529583862f53b398a08a2ccd9510364357aa3a2babdd111146b1560fe2771d187d5aa990f2528fa7d61a9b2bd0aca854b24f58c2812ce4f3ed131", 0x69}, {&(0x7f0000004280)="509ca823c113bc09e9cb8771bc3b38e89c08104be487a0d3edcc9de43a1066012e356811e917888d0d763e5416788ebf784c7c71d7db95d28bd1a806577d91fc5bf183befe270e57f1282abfbb988e1f21c725a635a2a93b9c20d0e10b7b78dc1f54aee491c17db91dbefe4a4b3aadccc0ec4596de9ebb3c2518a906812263de001ef2113e912eefd54aea7138a08223bc9796e255ccdb332a99663e0c422edd9796719a0a861050e068a4a623366f9966c967caca6763969b86db0886f13f7462e1d1a1", 0xc4}, {&(0x7f0000004380)="4bf442e1e46912497ad34a813584bb7a76254ee4f82aae472477b58daebaa525077c12c56268de3f018d96ea71f5589c0d0f002951c816c8a4b88d3642d0e13a65bf2d9a784971e6e3a5113a51f1fd0a2da6e56a6d1820defe743aed1a73e4f04bb0f7765abcbda64e6d97392ec23d4ec457edd021c924a94a3d1f30b1507f99e6c1e3685d53", 0x86}, {&(0x7f0000004440)="ff326fda2d35622ac2169af8564f77eb415bef67e1ac939b2c684559f3f0f4865c998f9eee364e87e0a35b32d2d7fa674742394acd6012722f9514dd8f4a64b275c4371eeca0f24fb1478245ebce13033c6a611490b944f376f0777a3b3e00863d8f9a652007dec9018785037793e1677789ed330a0fc568270054fd21a7de37d8a58c1bd3908ac1cdd62f7bbb1eafc300cf838da0cfceb5cfd7bb5c8b31b9922bfa1eaeb318da767a94e01b41ba19f71382d79fb7a1bb9cad5e98538779664e470365927cb2dbb53a662b638a447090", 0xd0}, {&(0x7f0000004540)="928954f2466731ed0c39f272e263aab490bc2da2c15dc4628cbabbe41720f46de4c8d16376bfd54f7ad3862f74cf8844263e7991683600b4991c", 0x3a}, {&(0x7f0000004580)="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", 0xfa}, {&(0x7f0000004680)}, {&(0x7f00000046c0)="0106ca140878df5095d078fe0a032b9e0ba6f9472df817e5315fb6a077138cac4ee16c1ab9dfce3078df230a3d10a95ebaf5f36db6043c1b49cf3fc19654abd493e5750491bf49f481ac35efa005f146f113d3b06ba924b9fa12d45c8d55642f90b9c9f2434ad5214859a0c573ea3a76b9698a62627525a09ee432a3a8378ca7e48d07ee2ce5397b7f95ae95208437fba38ee9a36b9f5132a78efd33372f407ed5bcab41929e6f79eac6b05006a0404cdfc402b530138d69426521b3983318cb09aeae57b2cc825f57768687c624fec56ebc35785c95c4cba6289707b22597be135e23818e1db9", 0xe7}, {&(0x7f00000047c0)="a8b449741441e5b69f0b871158afb3b53e698484f1d0f486aa1d03f8018cd00f3cad90f7ea73ea679946c6e32e19b7c13403427a933f494539839b203e7e161f6cf092e9f5f057037228485ba12bf5da", 0x50}, {&(0x7f0000004840)="2127ca5227d9bb3f197afbf098491347c6c97b5dd70cb37d23277ff4364652369aff5dee4744c19aaaf51a03836909eac56a5981378eb875c2cb3eeb96d80a20650df53b64e240d925d223bf9656dd0440ab416b979e2e515f837d531a0109b66744dbf426c42f9e6283c90eadccdbac25640be0e653617b887f83c0bc49a60421c01b3853ef2953f10e166914365ed8f8d56c89297a811dfeb6032f5e4ba60c4b0354902587e27addf5d182ee90b245f490f255c4387efd911608d00519476f58c43dde7a", 0xc5}], 0xa, &(0x7f0000004a00)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, r4}}}], 0x70, 0x80}}, {{&(0x7f0000004a80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004b80)=[{&(0x7f0000004b00)="34775c5e509c17e8f73f6a5a04cf00937f1f99a0df02b5fcb970fc965ea7d1742724b99d3d2235b170288e093bc52f0ed45d77553484e5093d147f0bb167d6851a2bfacab36cc75263a72a93fe35", 0x4e}], 0x1, &(0x7f0000004c00)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r5, r6]}}, @rights={{0x24, 0x1, 0x1, [r0, r9, r0, r10, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, 0xffffffffffffffff}}}], 0x88, 0x4010}}, {{&(0x7f0000004cc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004d40)="c0acc822a33ea18967a2f034d96a12d28087868bdf81db481a7229a0fc83c67f2439451056b1ef917756e6de30830f0a8d7acdbcc6e748d2966eb8670a881b831d36b1170de178d764fbc6e3deb3f600cf7ad91261f35dc277ef7044a0e896d5c36f407ca4337b3887b112cd053350edc73bbfd401c4d8ae08392e0ec18e81915975e06d5dac1cfe85c8c7c034d646045e17580fc59cd7f0af3ec1f82d69f27353e4bf006cbfc61e1daa637dc79276f0a0247fee2adf9a1e56de", 0xba}, {&(0x7f0000004e00)="661266b807b3642ebf647584ad9cb42b223184f5c628641a4d44b57debdcec7ff6d8", 0x22}, {&(0x7f0000004e40)="cad10cd7aa8a920db98ff4bc56333094bc92de4aaf99a3e377249588b8741cd24f2ea2ecd45f2f39b785fdc5fc6557fc845d88acd1638256dc14b66be211f2ff6b8d8f0366886ce2aa8e314638c542", 0x4f}, {&(0x7f0000004ec0)="01c5f81c507c81e7873ad744e0ee96bcc6e3e5e84a5a2589537913c7fa738f23c9d11c327162cf47de2ff0431a20c9c5f09848fd7799769f155291baccad86", 0x3f}], 0x4, &(0x7f0000004f40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}], 0x20, 0x20004081}}], 0xa, 0x41) mkdir(&(0x7f0000000000)='./file0\x00', 0x44) 12:55:55 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xc9ffff, 0x0) 12:55:55 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT, @ANYBLOB="fc9b6d896d6119433f8f5e6e1ac4b64dfdcfd710fb1c05cc247a70ab52810ccba0b4ec8d35b284363097f53b1d3c01fc2af935c51867bdf67e8ced6a98f094742879ddcbc2e20288f7e746b3504ab944a42d2acb536e0e678102e1d4c87fed69f950f90b00000000000000"], 0x102, 0x1) [ 2926.801870] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2926.801870] program syz-executor.1 not setting count and/or reply_len properly [ 2926.813274] FAULT_INJECTION: forcing a failure. [ 2926.813274] name failslab, interval 1, probability 0, space 0, times 0 [ 2926.814213] CPU: 1 UID: 0 PID: 42264 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2926.814233] Tainted: [W]=WARN [ 2926.814237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2926.814245] Call Trace: [ 2926.814251] [ 2926.814257] dump_stack_lvl+0xfa/0x120 [ 2926.814283] should_fail_ex+0x4d7/0x5e0 [ 2926.814302] should_failslab+0xc2/0x120 [ 2926.814319] __kmalloc_noprof+0xc8/0x6e0 [ 2926.814336] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2926.814355] ? bio_copy_from_iter+0x192/0x270 [ 2926.814373] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2926.814395] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2926.814413] blk_rq_map_user_iov+0x1fd/0x1180 [ 2926.814437] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2926.814459] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2926.814478] ? find_held_lock+0x2b/0x80 [ 2926.814496] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2926.814510] ? lock_release+0xc8/0x290 [ 2926.814523] ? import_ubuf+0x1be/0x220 [ 2926.814541] blk_rq_map_user_io+0x1cf/0x200 [ 2926.814561] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2926.814580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2926.814602] ? irq_work_queue+0x9c/0x100 [ 2926.814620] ? __asan_memset+0x24/0x50 [ 2926.814640] sg_common_write.constprop.0+0xd75/0x1710 [ 2926.814659] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2926.814672] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2926.814689] ? ___ratelimit+0x465/0xa10 [ 2926.814711] sg_write.part.0+0x6a2/0xb50 [ 2926.814725] ? __pfx_sg_write.part.0+0x10/0x10 [ 2926.814739] ? perf_trace_lock+0xb5/0x5d0 [ 2926.814756] ? __pfx_perf_trace_lock+0x10/0x10 [ 2926.814774] ? lock_acquire+0x15e/0x2f0 [ 2926.814788] ? perf_trace_lock+0xb5/0x5d0 [ 2926.814801] ? find_held_lock+0x2b/0x80 [ 2926.814819] ? get_pid_task+0xfd/0x250 [ 2926.814834] ? perf_trace_lock+0xb5/0x5d0 [ 2926.814849] ? avc_policy_seqno+0x9/0x20 [ 2926.814861] ? selinux_file_permission+0x99/0x600 [ 2926.814882] sg_write+0x86/0xe0 [ 2926.814894] vfs_write+0x2b7/0x1150 [ 2926.814907] ? __pfx_sg_write+0x10/0x10 [ 2926.814918] ? lock_acquire+0x15e/0x2f0 [ 2926.814932] ? __fget_files+0x34/0x3b0 [ 2926.814945] ? __pfx_vfs_write+0x10/0x10 [ 2926.814958] ? __fget_files+0x203/0x3b0 [ 2926.814969] ? lock_release+0xc8/0x290 [ 2926.814986] ? __fget_files+0x20d/0x3b0 [ 2926.815004] ksys_write+0x121/0x240 [ 2926.815016] ? __pfx_ksys_write+0x10/0x10 [ 2926.815035] do_syscall_64+0xbf/0x360 [ 2926.815049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2926.815062] RIP: 0033:0x7efff4616b19 [ 2926.815072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2926.815084] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2926.815097] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2926.815105] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2926.815112] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2926.815120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2926.815127] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2926.815145] [ 2926.823921] Invalid option length (1047482) for dns_resolver key [ 2926.870195] kernel write not supported for file /sg0 (pid: 28170 comm: kworker/0:2) [ 2926.881230] kernel write not supported for file /sg0 (pid: 37811 comm: kworker/0:0) 12:55:56 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1000000, 0x0) 12:55:56 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0c00, 0x0) 12:55:56 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX, @ANYRESOCT], 0x102, 0x1) 12:55:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 35) [ 2927.002501] kernel write not supported for file /sg0 (pid: 37811 comm: kworker/0:0) [ 2927.004846] kernel write not supported for file /sg0 (pid: 37811 comm: kworker/0:0) 12:55:56 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591", @ANYRESHEX], 0x102, 0x1) 12:55:56 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed1020, 0x0) [ 2927.162082] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2927.162082] program syz-executor.1 not setting count and/or reply_len properly 12:56:07 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0xffffffff, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="99b5ad4a56b6b3c56d579d1a373a6089ff782d673925361a1365ba79b7188ea57b71776ca5746ab35fe53c2cb4b441dce5c8b52832c8b87daa738485d823b20d06b2c91f71dce27dedfe86dfca7b1e09cf3094e0e25c5321f5a8eba7701164698c5208fec2ff193a3de9a8a32089407cff2c2664631227f5fae3d5c346c7dd56101909d4bac952c12ddf2bae0a94d487", 0x90, 0x2}, {&(0x7f0000000200)="e417e3b483ea29ed590ef3df0e59195db4481dbf331f2526b80f6d8cf356d2b8422c0c0bb78bd06de9abb4ac7e5ecd5b85deebb08028220c4ff0e27e79be0e6c2fcdce4205628f211783adb384bc272c19471e96c5f272d67629f0d15f7d67e4f0964f8df9a86b6284fc7a8f4fcd1f", 0x6f, 0x10001}], 0x8008, &(0x7f0000000380)={[{@huge_advise}, {@huge_always}], [{@pcr={'pcr', 0x3d, 0x39}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '+%'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x30, 0x38, 0x64, 0xb, 0x31, 0x65, 0x31], 0x2d, [0x37, 0x35, 0x39, 0x39], 0x2d, [0x35, 0x38, 0x38, 0x32], 0x2d, [0x30, 0x36, 0x39, 0x30], 0x2d, [0x30, 0x31, 0x65, 0x36, 0x2, 0x3, 0x30, 0x65]}}}]}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:56:07 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 36) 12:56:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@uname={'uname', 0x3d, '\xcf!\xf1p\xf0\x90Y\xccC\x15v\xab\rW\x84\xf0\x816UPu\xb1Yc\x10\xd6\xa8h\\\xd4\x84\rh,I\x0e\xa25\xddy\xa1\x05b\x96\xa3JP\xb9\xfa\n\x1d\xe0\xaeyH\xae\xaaH\xe7\xc8b\x8a\x87\xdf\x13\xbc\xbc\x18k\x1c\x15@\x19\xe9^@,ez\xef\x1b\xc6\xb9\xf3\xba\x0e\xd1\xdbvZ5\xf8\x89}\xfe\x8a\xddD\x98\xbf2[~\xc7\xc6B\xc8\x1a\xd3G59\x95\x82\xc6n-U\xef\xa0\x17;\x10\x1e\x196J\xc1 \xa4\x92\xec\xc4'}}, {@version_u}, {@access_client}, {@uname={'uname', 0x3d, '#{\\.{\'#'}}, {@mmap}, {@cache_fscache}, {@access_client}, {@noextend}, {@afid={'afid', 0x3d, 0x5}}]}}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)={0x8, 0xffffffffffffffff, 0x1, 0xb2, 0x6, [{0xfffffffffffffff7, 0x5, 0x4, '\x00', 0x2000}, {0x3ff, 0x1, 0x40000000000000, '\x00', 0x2}, {0x401, 0x4, 0x1, '\x00', 0x801}, {0x9, 0x5, 0x1, '\x00', 0x2103}, {0x6, 0xfffffffffffffffc, 0x1330}, {0xfffffffffffffff8, 0x5, 0x5d79, '\x00', 0x3082}]}) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x7) 12:56:07 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYBLOB="1adb230aa093710f9f4608b5f9cada063f9bd2ce0abd854ac94f8e487dfcc54f958ee23f5620f41e5e92cbc3481522a347f8cc83289bc06622044fed97d8e7de7e9e48503cd3cf020c82c216f87882edb6621ca357759627b56a64eb71d7a14aecdc793f67b1a58315bcfd2ad172161eb591"], 0x102, 0x1) 12:56:07 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f6e75ec6c623000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:07 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed104c, 0x0) 12:56:07 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$link(0x8, r1, r3) munlockall() 12:56:07 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x2000000, 0x0) 12:56:07 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES16], 0x102, 0x1) 12:56:07 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x1900040, 0x0) [ 2938.723226] loop2: detected capacity change from 0 to 264192 [ 2938.728148] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2938.728148] program syz-executor.1 not setting count and/or reply_len properly [ 2938.739824] FAULT_INJECTION: forcing a failure. [ 2938.739824] name failslab, interval 1, probability 0, space 0, times 0 [ 2938.740715] CPU: 1 UID: 0 PID: 42603 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2938.740734] Tainted: [W]=WARN [ 2938.740738] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2938.740746] Call Trace: [ 2938.740750] [ 2938.740755] dump_stack_lvl+0xfa/0x120 [ 2938.740785] should_fail_ex+0x4d7/0x5e0 [ 2938.740804] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2938.740821] should_failslab+0xc2/0x120 [ 2938.740838] __kmalloc_noprof+0xc8/0x6e0 [ 2938.740855] ? trace_kmalloc+0x1f/0xb0 [ 2938.740869] ? __kmalloc_noprof+0x29d/0x6e0 [ 2938.740886] ? bio_kmalloc+0x3e/0x70 [ 2938.740901] ? bio_copy_from_iter+0x192/0x270 [ 2938.740924] ? bio_kmalloc+0x3e/0x70 [ 2938.740937] bio_kmalloc+0x3e/0x70 [ 2938.740951] blk_rq_map_user_iov+0x390/0x1180 [ 2938.740977] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2938.740998] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2938.741017] ? find_held_lock+0x2b/0x80 [ 2938.741035] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2938.741050] ? lock_release+0xc8/0x290 [ 2938.741062] ? import_ubuf+0x1be/0x220 [ 2938.741079] blk_rq_map_user_io+0x1cf/0x200 [ 2938.741099] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2938.741119] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2938.741141] ? irq_work_queue+0x9c/0x100 [ 2938.741158] ? __asan_memset+0x24/0x50 [ 2938.741173] sg_common_write.constprop.0+0xd75/0x1710 [ 2938.741192] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2938.741206] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2938.741222] ? ___ratelimit+0x465/0xa10 [ 2938.741244] sg_write.part.0+0x6a2/0xb50 [ 2938.741258] ? __pfx_sg_write.part.0+0x10/0x10 [ 2938.741273] ? perf_trace_lock+0xb5/0x5d0 [ 2938.741290] ? __pfx_perf_trace_lock+0x10/0x10 [ 2938.741307] ? lock_acquire+0x15e/0x2f0 [ 2938.741321] ? perf_trace_lock+0xb5/0x5d0 [ 2938.741334] ? find_held_lock+0x2b/0x80 [ 2938.741352] ? get_pid_task+0xfd/0x250 [ 2938.741366] ? perf_trace_lock+0xb5/0x5d0 [ 2938.741382] ? avc_policy_seqno+0x9/0x20 [ 2938.741393] ? selinux_file_permission+0x99/0x600 [ 2938.741414] sg_write+0x86/0xe0 [ 2938.741426] vfs_write+0x2b7/0x1150 [ 2938.741439] ? __pfx_sg_write+0x10/0x10 [ 2938.741451] ? lock_acquire+0x15e/0x2f0 [ 2938.741464] ? __fget_files+0x34/0x3b0 [ 2938.741476] ? __pfx_vfs_write+0x10/0x10 [ 2938.741489] ? __fget_files+0x203/0x3b0 [ 2938.741501] ? lock_release+0xc8/0x290 [ 2938.741517] ? __fget_files+0x20d/0x3b0 [ 2938.741535] ksys_write+0x121/0x240 [ 2938.741548] ? __pfx_ksys_write+0x10/0x10 [ 2938.741567] do_syscall_64+0xbf/0x360 [ 2938.741580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2938.741593] RIP: 0033:0x7efff4616b19 [ 2938.741603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2938.741615] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2938.741632] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2938.741640] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2938.741647] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2938.741655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2938.741662] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2938.741680] [ 2938.770959] Invalid option length (1047482) for dns_resolver key 12:56:07 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed2000, 0x0) 12:56:08 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x8cffffff, 0x0) 12:56:08 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 37) 12:56:08 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x10) 12:56:08 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffffffff, 0x4c2200) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x8, 0x8080) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffe, 0x1e, 0x6, @buffer={0x0, 0xe, &(0x7f0000000100)=""/14}, &(0x7f0000000140)="dce706a9880c910387ad3c9464e0ffde9fddadc11894b8cadb79437116c5", &(0x7f0000000180)=""/93, 0x9, 0x1, 0xffffffffffffffff, &(0x7f0000000200)}) r3 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) [ 2938.993384] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2938.993384] program syz-executor.1 not setting count and/or reply_len properly 12:56:18 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0xfffffffc}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)={{0x107, 0xed, 0x7f, 0x2b7, 0x31d, 0x80009, 0x1e5, 0x8}, "d87f22bf9c88a019e11c36229484011b64ff37816a8d07208e9e4f34315f8a2fa9c5a35d5d0f9c16d38534467c838d90d37ff38d0ed397bdafc871c2e58989005b99f0c308a9e5da105e3f54b79b55fc570b49fd681bf4fcf74107c0f788e8cb6dd0e5a75ddf508f06b12cd684ca3f6499a77b28252c75c32fcc7aa8a276f409e90f0a238553101797d75b631bd00e737c70499257a67856c2d718d4c54af1e4c386b97535aad4cd611d65cef4f8164c1f759b886aa6104e2c1cd627ce38434233cbfd9fd5fab20f6aa7cbc779b2f71877a77175ec9533853a24f24aa2ddacec3a41", ['\x00']}, 0x202) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000040)="e6aeba758251ce51d9a17d2f2e81", 0xe, 0x20000000, &(0x7f0000000140)=@l2tp={0x2, 0x0, @broadcast, 0x1}, 0x80) 12:56:18 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed2010, 0x0) 12:56:18 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x270441, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 12:56:18 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xf6ffffff, 0x0) 12:56:18 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r2 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4d0f, 0x2}, 0xe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffff9, 0x0) munlockall() 12:56:18 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="28000000020000009550c5769f983ff908000000d211ce3d00000000cb5b24ee5bea979b1802bc1a9a98cac800000000"], &(0x7f0000000080), 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 38) 12:56:18 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x102, 0x1) [ 2949.034049] Invalid option length (1047482) for dns_resolver key 12:56:18 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed3f00, 0x0) [ 2949.073887] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2949.073887] program syz-executor.1 not setting count and/or reply_len properly 12:56:18 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 2949.091293] FAULT_INJECTION: forcing a failure. [ 2949.091293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2949.093266] CPU: 0 UID: 0 PID: 42848 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2949.093303] Tainted: [W]=WARN [ 2949.093310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2949.093324] Call Trace: [ 2949.093331] [ 2949.093340] dump_stack_lvl+0xfa/0x120 [ 2949.093382] should_fail_ex+0x4d7/0x5e0 [ 2949.093415] _copy_from_iter+0x1dc/0x1660 [ 2949.093447] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2949.093473] ? do_raw_spin_lock+0x123/0x260 [ 2949.093506] ? __pfx__copy_from_iter+0x10/0x10 [ 2949.093531] ? find_held_lock+0x2b/0x80 [ 2949.093564] ? __create_object+0x59/0x80 [ 2949.093599] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2949.093638] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2949.093663] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2949.093698] copy_page_from_iter+0xe3/0x180 [ 2949.093731] bio_copy_from_iter+0x108/0x270 [ 2949.093776] blk_rq_map_user_iov+0xc07/0x1180 [ 2949.093834] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2949.093874] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2949.093907] ? find_held_lock+0x2b/0x80 [ 2949.093940] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2949.093964] ? lock_release+0xc8/0x290 [ 2949.093988] ? import_ubuf+0x1be/0x220 [ 2949.094018] blk_rq_map_user_io+0x1cf/0x200 [ 2949.094056] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2949.094091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2949.094130] ? irq_work_queue+0x9c/0x100 [ 2949.094161] ? __asan_memset+0x24/0x50 [ 2949.094191] sg_common_write.constprop.0+0xd75/0x1710 [ 2949.094226] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2949.094251] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2949.094282] ? ___ratelimit+0x465/0xa10 [ 2949.094323] sg_write.part.0+0x6a2/0xb50 [ 2949.094348] ? __pfx_sg_write.part.0+0x10/0x10 [ 2949.094376] ? perf_trace_lock+0xb5/0x5d0 [ 2949.094407] ? __pfx_perf_trace_lock+0x10/0x10 [ 2949.094439] ? lock_acquire+0x15e/0x2f0 [ 2949.094465] ? perf_trace_lock+0xb5/0x5d0 [ 2949.094489] ? find_held_lock+0x2b/0x80 [ 2949.094521] ? get_pid_task+0xfd/0x250 [ 2949.094547] ? perf_trace_lock+0xb5/0x5d0 [ 2949.094577] ? avc_policy_seqno+0x9/0x20 [ 2949.094596] ? selinux_file_permission+0x99/0x600 [ 2949.094635] sg_write+0x86/0xe0 [ 2949.094657] vfs_write+0x2b7/0x1150 [ 2949.094679] ? __pfx_sg_write+0x10/0x10 [ 2949.094701] ? lock_acquire+0x15e/0x2f0 [ 2949.094725] ? __fget_files+0x34/0x3b0 [ 2949.094748] ? __pfx_vfs_write+0x10/0x10 [ 2949.094772] ? __fget_files+0x203/0x3b0 [ 2949.094793] ? lock_release+0xc8/0x290 [ 2949.094823] ? __fget_files+0x20d/0x3b0 [ 2949.094857] ksys_write+0x121/0x240 [ 2949.094880] ? __pfx_ksys_write+0x10/0x10 [ 2949.094915] do_syscall_64+0xbf/0x360 [ 2949.094939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2949.094962] RIP: 0033:0x7efff4616b19 [ 2949.094979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2949.095001] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2949.095023] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2949.095039] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2949.095052] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2949.095066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2949.095079] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2949.095112] 12:56:18 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x140, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0x4, 0x6, 0x79bd, 0x63, 0x12, "916f87bf9829b3529936569ad4bdd370a1345d"}) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2000) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="95b9be4415a2925fbe62e98427f788eec97caa9ca793f034a7280ed11bc06e77a42c90affc6f52985f0c99e3396be381c0a1cc0d48ec41138b3aba991b607ec4932b10cf11840bb66d760dd4214734f96a6569f3cd89b2958ed2b166d8af282c5780eaf8da030cb0b1d3b5b51c341c4524c903f4ad619e862a8b9dab8afe88c124710f0b139871a38039604b447cfae796d9baace541a3d77431fd") r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:56:18 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed4000, 0x0) 12:56:18 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xffffff8c, 0x0) 12:56:18 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[], 0x102, 0x1) 12:56:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7b99, 0x8040) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r1, r0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 39) 12:56:18 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2949.407584] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2949.407584] program syz-executor.1 not setting count and/or reply_len properly [ 2949.413935] FAULT_INJECTION: forcing a failure. [ 2949.413935] name failslab, interval 1, probability 0, space 0, times 0 [ 2949.414909] CPU: 1 UID: 0 PID: 43075 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2949.414930] Tainted: [W]=WARN [ 2949.414934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2949.414942] Call Trace: [ 2949.414946] [ 2949.414951] dump_stack_lvl+0xfa/0x120 [ 2949.414977] should_fail_ex+0x4d7/0x5e0 [ 2949.414996] should_failslab+0xc2/0x120 [ 2949.415013] __kmalloc_noprof+0xc8/0x6e0 [ 2949.415031] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2949.415050] ? bio_copy_from_iter+0x192/0x270 [ 2949.415068] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2949.415090] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2949.415108] blk_rq_map_user_iov+0x1fd/0x1180 [ 2949.415133] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2949.415155] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2949.415175] ? find_held_lock+0x2b/0x80 [ 2949.415192] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2949.415207] ? lock_release+0xc8/0x290 [ 2949.415220] ? import_ubuf+0x1be/0x220 [ 2949.415237] blk_rq_map_user_io+0x1cf/0x200 [ 2949.415257] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2949.415276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2949.415299] ? irq_work_queue+0x9c/0x100 [ 2949.415316] ? __asan_memset+0x24/0x50 [ 2949.415331] sg_common_write.constprop.0+0xd75/0x1710 [ 2949.415350] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2949.415364] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2949.415381] ? ___ratelimit+0x465/0xa10 [ 2949.415403] sg_write.part.0+0x6a2/0xb50 [ 2949.415417] ? __pfx_sg_write.part.0+0x10/0x10 [ 2949.415432] ? perf_trace_lock+0xb5/0x5d0 [ 2949.415449] ? __pfx_perf_trace_lock+0x10/0x10 [ 2949.415466] ? lock_acquire+0x15e/0x2f0 [ 2949.415480] ? perf_trace_lock+0xb5/0x5d0 [ 2949.415493] ? find_held_lock+0x2b/0x80 [ 2949.415511] ? get_pid_task+0xfd/0x250 [ 2949.415525] ? perf_trace_lock+0xb5/0x5d0 [ 2949.415541] ? avc_policy_seqno+0x9/0x20 [ 2949.415552] ? selinux_file_permission+0x99/0x600 [ 2949.415572] sg_write+0x86/0xe0 [ 2949.415584] vfs_write+0x2b7/0x1150 [ 2949.415597] ? __pfx_sg_write+0x10/0x10 [ 2949.415609] ? lock_acquire+0x15e/0x2f0 [ 2949.415627] ? __fget_files+0x34/0x3b0 [ 2949.415639] ? __pfx_vfs_write+0x10/0x10 [ 2949.415652] ? __fget_files+0x203/0x3b0 [ 2949.415664] ? lock_release+0xc8/0x290 [ 2949.415680] ? __fget_files+0x20d/0x3b0 [ 2949.415698] ksys_write+0x121/0x240 [ 2949.415710] ? __pfx_ksys_write+0x10/0x10 [ 2949.415729] do_syscall_64+0xbf/0x360 [ 2949.415743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2949.415756] RIP: 0033:0x7efff4616b19 [ 2949.415765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2949.415777] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2949.415790] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2949.415798] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2949.415806] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2949.415813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2949.415820] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2949.415838] 12:56:31 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:56:31 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 40) 12:56:31 executing program 7: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), &(0x7f00000003c0)=ANY=[], 0x102, 0x0) 12:56:31 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed4c10, 0x0) 12:56:31 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:56:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:31 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r2 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0xb7, 0x7f, 0xa4, 0x8, 0x0, 0x8, 0x8880, 0x1c, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0xb9, 0x7}, 0x420, 0x8, 0x101, 0x2, 0x80000000, 0x7, 0x9, 0x0, 0xffffffff, 0x0, 0x6}, r3, 0xc, r2, 0x0) munlockall() 12:56:31 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xfffffff6, 0x0) [ 2962.711565] Invalid option length (1047482) for dns_resolver key [ 2962.739510] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2962.739510] program syz-executor.1 not setting count and/or reply_len properly 12:56:31 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r2 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x4d0f, 0x2}, 0xe) keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffff9, 0x0) munlockall() 12:56:31 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x8000000000000, 0x0) 12:56:31 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="2f6465762f6e756c6c6238009f716457272dd6ea35f2972491efbef8ef6d83f1ea6755fe9f73e397a2a691e35999eb9f6cf39a522466029cf04041b99391e0c6001e35ba7280d8b28cefd698c7c4cf758e241799763b2751dce93b032ba953798d17108fcb708df1aa1891463b9a9c17a422d952e85bd4f67125a9680b159dbcc1b67cf37d7d775891f7310eac74171dc86756f0d4983f148860193854bf2c2e5e348f3943"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x1, &(0x7f0000000240)=[{&(0x7f0000000200)="547e353b53d1b3ee067c4c2c0b40243d6477044af8a9ac9aadd21a5d2aafda5c6aff5a47f51b", 0x26, 0x9}], 0x20000, &(0x7f0000000280)={[{@minixdf}, {@barrier}, {@data_err_abort}], [{@appraise}]}) 12:56:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed4e00, 0x0) 12:56:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 41) 12:56:32 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x20010, r1, 0x79b90000) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x2) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) [ 2962.945535] Invalid option length (1047482) for dns_resolver key 12:56:32 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0x39) getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000740)) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000640), 0x66d2, 0x20000) connect$bt_l2cap(r4, &(0x7f0000000680)={0x1f, 0x1ff, @none, 0x1000, 0x1}, 0xe) capset(&(0x7f00000006c0)={0x20080522, r1}, &(0x7f0000000700)={0x7, 0x8, 0x0, 0x4, 0x10001, 0x7fffffff}) fchown(r3, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f0000000500)=[{&(0x7f0000000140)="4c64ddfd892a8b19a83c9caeadefb1606120e5b06bbe4d1383e6af4b00bc4fb687efc320a21768089fbe6d7fa89a7f8824d44039a56a3581fcebf21d05dc3a7960d51d34be5f51d53d4fc98a7d524a359ca14e0ba9fd6cc1386dc6e64c18e59235ce116d114f77e7e56f0414896a7b681a714e3d0699d592a60187a1777ac743e3be9dba3ce956d0d4b06118ec82e735fe7a0f366fc999fc31df1c6ef9823ea48599f39184ee4f7ab05e9bb380fdcf54ef1b01e88f118fa69383a89c3e42f1fb12dad57664c75d7f29258e2632d7b3c772b533b0af1c88999b7914711aaa6f749645d9fffd14f014405a7d3a", 0xec, 0x1f}, {&(0x7f0000000240)="2ad7258523099d6836eb998d82e5d0c49868cd7ab95a1385634b0d37432bdbd2cc1647bb7b5bd05e8ab4e45e782fa5a89fefad9db39075ef5e195e539ec34955e994eb963091ec7336a8531fe28408aa684fbf0bfd468b0ec9e5e45e3be57c741316ed2a3aa6d4d45abb662a856cbcdb8ea4c9a089fccc9878ee695d7533ab158c779c135a3333e103121ddf0f7b374c10bd5ae6b7191f79d3dde313f232192a867c10bcf47af952c20b4594f0cd66dce8205bd44ab4", 0xb6, 0x2}, {&(0x7f0000000300)="0f293b58bcb197162d90ab9749eec98ba46b8f9f5fbbc369aa77d4828525c7107aaa7016d6c827f4ed08d829ef2b6fe42b1f45e3a2c3be8ec4b74ec797aab5", 0x3f, 0x4}, {&(0x7f0000000340)="02195bf4dc6e812b3f13555523a7cc249539ab020304acaa9684c3ed91bb20745d83b40f3356d4e5dce9bbc7f9de606fcd8e46f196542788a55e462a4a12471a0ef52733ac24f083ad854b06c1af942f577b3a778b5f694fc1e03e4d8d302242f20407643a20b531483b386fa7ff2cbf29c7e854c486ba1c870f35d77a28a228b050d4fd89e72f76582195d5c27d95175b81dadbcd608c37f2", 0x99, 0x1}, {&(0x7f0000000400)="45d8d51ffbb44c3eb83126f0797c5cba60867ef84b9df8a7e6e3fb776349a958c99a3001fa9d7e9cd03dac2078b240a2219b2ab6fa26ff646018c8aa05643206bc4a0b22f29cc569e364cab794c7e7aa78880cda8ac05feda57e1a9be9dfe0d3a3dbfcbe398c6b1c44a9bb2d6dfafd3bf89dcddcf1abc3704641fce466b24d5fa73ed6e945f5ffbe856bfb28b4ee3b4a9aeca9e7e6e61d479b0f996ae48278fce8e1ff609c05c9bdce7e5d443f3a2687758c30438acfa3d089e0", 0xba, 0x80}, {&(0x7f00000004c0)="a3ad76f9f7d2a7b103e5f5fe9cfc4d188dc7852eed7474170b", 0x19, 0x1}], 0x1014814, &(0x7f00000005c0)={[{@huge_within_size}, {@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x3a]}}}}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, '*@/-'}}, {@dont_measure}, {@hash}, {@measure}, {@measure}, {@fowner_eq={'fowner', 0x3d, r2}}]}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) [ 2963.017588] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2963.017588] program syz-executor.1 not setting count and/or reply_len properly [ 2963.035373] FAULT_INJECTION: forcing a failure. [ 2963.035373] name failslab, interval 1, probability 0, space 0, times 0 [ 2963.037147] CPU: 1 UID: 0 PID: 43279 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2963.037186] Tainted: [W]=WARN [ 2963.037194] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2963.037207] Call Trace: [ 2963.037215] [ 2963.037224] dump_stack_lvl+0xfa/0x120 [ 2963.037267] should_fail_ex+0x4d7/0x5e0 [ 2963.037294] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2963.037324] should_failslab+0xc2/0x120 [ 2963.037353] __kmalloc_noprof+0xc8/0x6e0 [ 2963.037388] ? trace_kmalloc+0x1f/0xb0 [ 2963.037413] ? __kmalloc_noprof+0x29d/0x6e0 [ 2963.037444] ? bio_kmalloc+0x3e/0x70 [ 2963.037470] ? bio_copy_from_iter+0x192/0x270 [ 2963.037511] ? bio_kmalloc+0x3e/0x70 [ 2963.037535] bio_kmalloc+0x3e/0x70 [ 2963.037563] blk_rq_map_user_iov+0x390/0x1180 [ 2963.037609] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2963.037656] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2963.037691] ? find_held_lock+0x2b/0x80 [ 2963.037723] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2963.037749] ? lock_release+0xc8/0x290 [ 2963.037772] ? import_ubuf+0x1be/0x220 [ 2963.037803] blk_rq_map_user_io+0x1cf/0x200 [ 2963.037840] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2963.037875] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2963.037914] ? irq_work_queue+0x9c/0x100 [ 2963.037960] ? __asan_memset+0x24/0x50 [ 2963.037988] sg_common_write.constprop.0+0xd75/0x1710 [ 2963.038023] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2963.038049] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2963.038079] ? ___ratelimit+0x465/0xa10 [ 2963.038119] sg_write.part.0+0x6a2/0xb50 [ 2963.038144] ? __pfx_sg_write.part.0+0x10/0x10 [ 2963.038171] ? perf_trace_lock+0xb5/0x5d0 [ 2963.038202] ? __pfx_perf_trace_lock+0x10/0x10 [ 2963.038234] ? lock_acquire+0x15e/0x2f0 [ 2963.038260] ? perf_trace_lock+0xb5/0x5d0 [ 2963.038284] ? find_held_lock+0x2b/0x80 [ 2963.038316] ? get_pid_task+0xfd/0x250 [ 2963.038342] ? perf_trace_lock+0xb5/0x5d0 [ 2963.038371] ? avc_policy_seqno+0x9/0x20 [ 2963.038391] ? selinux_file_permission+0x99/0x600 [ 2963.038428] sg_write+0x86/0xe0 [ 2963.038451] vfs_write+0x2b7/0x1150 [ 2963.038475] ? __pfx_sg_write+0x10/0x10 [ 2963.038497] ? lock_acquire+0x15e/0x2f0 [ 2963.038522] ? __fget_files+0x34/0x3b0 [ 2963.038544] ? __pfx_vfs_write+0x10/0x10 [ 2963.038568] ? __fget_files+0x203/0x3b0 [ 2963.038589] ? lock_release+0xc8/0x290 [ 2963.038619] ? __fget_files+0x20d/0x3b0 [ 2963.038653] ksys_write+0x121/0x240 [ 2963.038676] ? __pfx_ksys_write+0x10/0x10 [ 2963.038712] do_syscall_64+0xbf/0x360 [ 2963.038735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2963.038759] RIP: 0033:0x7efff4616b19 [ 2963.038777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2963.038798] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2963.038821] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2963.038836] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2963.038849] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2963.038863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2963.038876] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2963.038909] 12:56:32 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x100000000000000, 0x0) 12:56:32 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0edf000, 0x0) 12:56:45 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x200000000000000, 0x0) 12:56:45 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:45 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) uname(&(0x7f00000004c0)=""/205) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() r2 = request_key(&(0x7f0000000300)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x2}, &(0x7f0000000440)='./cgroup/syz0\x00', 0xfffffffffffffff9) add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000002c0)={'fscrypt:', @desc4}, &(0x7f00000005c0)={0x0, "0f9dac1452ff36905ec98178dc1148488108efe9648b51f9f62dc21ca58e604e77c1d81464d760b799a56297b274201cec953360bf8db4721a0bea6658080757", 0x37}, 0x48, r2) 12:56:45 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f00000000c0)={0x1ffc0, 0xfffe, 0x80000001, 0x200, 0x7fffffff, 0x80000000}) 12:56:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:45 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:56:45 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='devtmpfs\x00', 0x100000, 0x0) 12:56:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 42) [ 2976.286371] Invalid option length (1047482) for dns_resolver key 12:56:45 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x8cffffff00000000, 0x0) [ 2976.351891] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2976.351891] program syz-executor.1 not setting count and/or reply_len properly 12:56:45 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000140)={{r1}, "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"}) 12:56:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 43) 12:56:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:56:45 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xf6ffffff00000000, 0x0) 12:56:45 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/122, 0x7a}, {0xfffffffffffffffd}, {&(0x7f00000003c0)=""/118, 0x76}, {&(0x7f0000000440)=""/214, 0xd6}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000580)=""/170, 0xaa}], 0x6, &(0x7f00000006c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x98}, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r4, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r5}}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = dup2(r0, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r12}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="e0d3345ad71be69a0b603a451d0a023d40851f74e9fc3ac0935a8f9ed540e280a4136eac51a630ea8db4a40a642b35be34b8ba9d3af25cbeaf8c2f014f4d0514a88ae547c37c30484fd3c0113cfefde3c49cae137d384e70cca880973cfda868c5c946cb2b471f4b5a5419385f45a463c6e992788cfcd8a582568801149c69a1b902b96d72d369ec20961870fd8c38d7a3ea93c0ba9a0d8ee625b0c9c14356544b37193a7466087eb36ce5f2f3d34cf03dd0b8a87e94d0", 0xb7}, {&(0x7f0000000000)="e064d608a1c8a59c9de72ab8196c52a63cb3b3c698d68249c1bb6c35c6a91fe37fcbec9f4052570fc5089a4c4691b36a52d30cacdea92cc3663fc8d052b1424c56fdb8529dc105898f62b451ff6c45eab4861cad843aa5c9628a7e55656f3961e1aa162f6b11bbea0acbb439e3287c2d3b3ddfb192cdf262", 0x78}, {&(0x7f0000000200)="5f3ec571e5a1f4a409dd685f0374ca4f2add9ec58a58a7f40aa4a35ae90d4be2b650b6aa08313ed98c46edeac53447f142ba05986e7731aa74aa9942ad7ee27d19cb372c7eb977dd739e8a6c64cb6abc1735bf2b866cfebb220b07917d08f4b834ae74bf8e8c39564de2425e381d003644bf6f407186043515ea28d2d9eaee3248bab28f4410e049d8bdd95d13c791d37f8a06b9e321ccf616498226b87e6072178a82cb00bbbed4c7b623af1bba6868d743fe971720462d94ca1e9d536f5b2cac3a8bd7aa2012e64aa5c789cf6a28bd4ec316439346", 0xd6}], 0x3, &(0x7f00000007c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, r3, r5}}}], 0x38, 0x200080c0}}, {{&(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000000880)="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", 0x1000}], 0x1, &(0x7f00000018c0)=[@rights={{0x24, 0x1, 0x1, [r6, r8, r10, r0, r11]}}, @rights={{0x10}}], 0x38, 0x4000000}}], 0x2, 0x8010) 12:56:45 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = dup2(r2, r0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:56:45 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 2976.548535] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2976.548535] program syz-executor.1 not setting count and/or reply_len properly [ 2976.558132] FAULT_INJECTION: forcing a failure. [ 2976.558132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2976.559230] CPU: 1 UID: 0 PID: 43826 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2976.559251] Tainted: [W]=WARN [ 2976.559255] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2976.559263] Call Trace: [ 2976.559267] [ 2976.559272] dump_stack_lvl+0xfa/0x120 [ 2976.559297] should_fail_ex+0x4d7/0x5e0 [ 2976.559316] _copy_from_iter+0x1dc/0x1660 [ 2976.559334] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 2976.559350] ? do_raw_spin_lock+0x123/0x260 [ 2976.559368] ? __pfx__copy_from_iter+0x10/0x10 [ 2976.559382] ? find_held_lock+0x2b/0x80 [ 2976.559400] ? __create_object+0x59/0x80 [ 2976.559420] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2976.559438] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 2976.559452] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2976.559471] copy_page_from_iter+0xe3/0x180 [ 2976.559489] bio_copy_from_iter+0x108/0x270 [ 2976.559514] blk_rq_map_user_iov+0xc07/0x1180 [ 2976.559539] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2976.559560] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2976.559580] ? find_held_lock+0x2b/0x80 [ 2976.559597] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2976.559611] ? lock_release+0xc8/0x290 [ 2976.559628] ? import_ubuf+0x1be/0x220 [ 2976.559645] blk_rq_map_user_io+0x1cf/0x200 [ 2976.559666] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2976.559685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2976.559707] ? irq_work_queue+0x9c/0x100 [ 2976.559725] ? __asan_memset+0x24/0x50 [ 2976.559741] sg_common_write.constprop.0+0xd75/0x1710 [ 2976.559760] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2976.559774] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2976.559790] ? ___ratelimit+0x465/0xa10 [ 2976.559813] sg_write.part.0+0x6a2/0xb50 [ 2976.559826] ? __pfx_sg_write.part.0+0x10/0x10 [ 2976.559841] ? perf_trace_lock+0xb5/0x5d0 [ 2976.559857] ? __pfx_perf_trace_lock+0x10/0x10 [ 2976.559875] ? lock_acquire+0x15e/0x2f0 [ 2976.559888] ? perf_trace_lock+0xb5/0x5d0 [ 2976.559901] ? find_held_lock+0x2b/0x80 [ 2976.559919] ? get_pid_task+0xfd/0x250 [ 2976.559933] ? perf_trace_lock+0xb5/0x5d0 [ 2976.559949] ? avc_policy_seqno+0x9/0x20 [ 2976.559960] ? selinux_file_permission+0x99/0x600 [ 2976.559981] sg_write+0x86/0xe0 [ 2976.559993] vfs_write+0x2b7/0x1150 [ 2976.560005] ? __pfx_sg_write+0x10/0x10 [ 2976.560017] ? lock_acquire+0x15e/0x2f0 [ 2976.560030] ? __fget_files+0x34/0x3b0 [ 2976.560043] ? __pfx_vfs_write+0x10/0x10 [ 2976.560056] ? __fget_files+0x203/0x3b0 [ 2976.560067] ? lock_release+0xc8/0x290 [ 2976.560083] ? __fget_files+0x20d/0x3b0 [ 2976.560101] ksys_write+0x121/0x240 [ 2976.560114] ? __pfx_ksys_write+0x10/0x10 [ 2976.560132] do_syscall_64+0xbf/0x360 [ 2976.560146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2976.560159] RIP: 0033:0x7efff4616b19 [ 2976.560168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2976.560180] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2976.560193] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2976.560202] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2976.560209] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2976.560217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2976.560224] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2976.560242] 12:56:45 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xffffc90000000000, 0x0) 12:56:45 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 2976.651100] Invalid option length (1047482) for dns_resolver key [ 2976.653214] 9pnet_fd: Insufficient options for proto=fd 12:56:45 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f00000000c0)={0x8, 0xe985, 0x6, 0x0, 0x7, 0x7}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0xeb, 0x0, 0x0, 0x8000, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='fuseblk\x00', 0x4080, &(0x7f0000000200)='\xb9\xe8*\\(\x00') [ 2976.673101] 9pnet_fd: Insufficient options for proto=fd [ 2976.691411] 9pnet_fd: Insufficient options for proto=fd [ 2976.738503] cgroup: fork rejected by pids controller in /syz3 12:56:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 44) 12:56:58 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x4000) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x4) 12:56:58 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:56:58 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0xffffffff00000000, 0x0) 12:56:58 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x1, 0xb5, 0x80, 0xff, 0x0, 0x4, 0x90406, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x5, 0x2}, 0x4000, 0x7, 0x3, 0x9, 0x2, 0x4, 0x1, 0x0, 0x18, 0x0, 0x1f}, 0x0, 0xc, 0xffffffffffffffff, 0x8) munlockall() 12:56:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)={0xbe, 0xffffffff, 0x1, "764372849716992661a46f8d51735419949221e88d38b8d57e729bb745a1f208ce89f6f03c2a9074dc551cc313435c5d3fdb769b27c736643e449de614ab8ff4ca9985480064e95f058f1a667e81881cca9f0748098959945848d1d18db7f2d998d3bd9191babd279eed0e24c90a778fab02ee11ad4022ae39871ae016a433554add5b3fe5418d24a53ca629e947c04046764ba50de4fbf360fba8cf38e35d8ac0d3890aa36081eff7f4d70beb2af3db96f96a16f73ec65686744068053e"}) r3 = gettid() capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r6 = dup2(r5, r4) write$binfmt_aout(r6, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r3, 0xa, r6, 0x12) r7 = accept(r2, &(0x7f0000000140)=@in={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x80) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r3, 0x7, r7, &(0x7f0000000200)={r2, r8, 0x35112d7a}) 12:56:58 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) 12:56:58 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file1\x00', 0x8) [ 2989.415062] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2989.464040] Invalid option length (1047482) for dns_resolver key [ 2989.467103] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 2989.467103] program syz-executor.1 not setting count and/or reply_len properly [ 2989.484286] FAULT_INJECTION: forcing a failure. [ 2989.484286] name failslab, interval 1, probability 0, space 0, times 0 [ 2989.485920] CPU: 0 UID: 0 PID: 44333 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 2989.485956] Tainted: [W]=WARN [ 2989.485963] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2989.485976] Call Trace: [ 2989.485985] [ 2989.485993] dump_stack_lvl+0xfa/0x120 [ 2989.486036] should_fail_ex+0x4d7/0x5e0 [ 2989.486068] should_failslab+0xc2/0x120 [ 2989.486097] __kmalloc_noprof+0xc8/0x6e0 [ 2989.486142] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 2989.486175] ? bio_copy_from_iter+0x192/0x270 [ 2989.486210] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2989.486251] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 2989.486284] blk_rq_map_user_iov+0x1fd/0x1180 [ 2989.486330] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 2989.486369] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2989.486404] ? find_held_lock+0x2b/0x80 [ 2989.486437] ? sg_common_write.constprop.0+0xc36/0x1710 [ 2989.486462] ? lock_release+0xc8/0x290 [ 2989.486485] ? import_ubuf+0x1be/0x220 [ 2989.486516] blk_rq_map_user_io+0x1cf/0x200 [ 2989.486553] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 2989.486589] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2989.486634] ? irq_work_queue+0x9c/0x100 [ 2989.486665] ? __asan_memset+0x24/0x50 [ 2989.486693] sg_common_write.constprop.0+0xd75/0x1710 [ 2989.486727] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 2989.486752] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 2989.486783] ? ___ratelimit+0x465/0xa10 [ 2989.486823] sg_write.part.0+0x6a2/0xb50 [ 2989.486848] ? __pfx_sg_write.part.0+0x10/0x10 [ 2989.486875] ? perf_trace_lock+0xb5/0x5d0 [ 2989.486907] ? __pfx_perf_trace_lock+0x10/0x10 [ 2989.486938] ? lock_acquire+0x15e/0x2f0 [ 2989.486964] ? perf_trace_lock+0xb5/0x5d0 [ 2989.486988] ? find_held_lock+0x2b/0x80 [ 2989.487020] ? get_pid_task+0xfd/0x250 [ 2989.487046] ? perf_trace_lock+0xb5/0x5d0 [ 2989.487075] ? avc_policy_seqno+0x9/0x20 [ 2989.487094] ? selinux_file_permission+0x99/0x600 [ 2989.487132] sg_write+0x86/0xe0 [ 2989.487154] vfs_write+0x2b7/0x1150 [ 2989.487177] ? __pfx_sg_write+0x10/0x10 [ 2989.487199] ? lock_acquire+0x15e/0x2f0 [ 2989.487223] ? __fget_files+0x34/0x3b0 [ 2989.487246] ? __pfx_vfs_write+0x10/0x10 [ 2989.487269] ? __fget_files+0x203/0x3b0 [ 2989.487290] ? lock_release+0xc8/0x290 [ 2989.487320] ? __fget_files+0x20d/0x3b0 [ 2989.487353] ksys_write+0x121/0x240 [ 2989.487377] ? __pfx_ksys_write+0x10/0x10 [ 2989.487411] do_syscall_64+0xbf/0x360 [ 2989.487436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2989.487459] RIP: 0033:0x7efff4616b19 [ 2989.487476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2989.487498] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2989.487521] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 2989.487536] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 2989.487550] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2989.487564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2989.487577] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 2989.487610] 12:57:12 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0xfffffffffffffe97, 0xeb, 0x0, 0x9, 0x0, 0x0, 0x80, 0x31000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:57:12 executing program 7: truncate(&(0x7f0000000000)='./file0\x00', 0x9) 12:57:12 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x8) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.metacopy\x00') umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:57:12 executing program 6: sync_file_range(0xffffffffffffffff, 0x4, 0xfff, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='fd/3\x00') r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000480)={0x0, 0xfffffffffffffffe, 0xdc, 0x8, @scatter={0x4, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/26, 0x1a}, {&(0x7f0000000080)=""/213, 0xd5}, {&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/160, 0xa0}]}, &(0x7f0000000300)="db6d58e13a4d2b6dd0b1764b84660d4bb62dfe840a7fe19730480a0ebb796c6c02fd0c0dd00dde84580269ba9dad401bf74fe5960091929862fd248472878bf9e9baf817c78f8ed65967e4817332f6a035de644cea3aeeb0242ea08c9d3d4b41d99dc35d7eccb17dc8b62fbb8eb43a760f1dd811b1e3157dbfadb245f49dfabc2a330694a6a4d8b9a2a291af9686fd39ad7aa6326d5dfeecb165eecd182eea2fda680f6fac22c9fa5b7ce992ccae1455dc148f922a432acbe4ae874881d78f4ac8aceca45802444def8d55267020715db0041c2d1abd331e35232512", &(0x7f0000000400)=""/11, 0x5, 0x10, 0x0, &(0x7f0000000440)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:57:12 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='jfs\x00', 0x84, &(0x7f00000001c0)='[\x00') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:57:12 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='ubifs\x00', 0x1000000, &(0x7f0000000180)='debugfs\x00') 12:57:12 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2) 12:57:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 45) [ 3003.693818] Invalid option length (1047482) for dns_resolver key [ 3003.740946] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3003.740946] program syz-executor.1 not setting count and/or reply_len properly 12:57:13 executing program 7: truncate(&(0x7f0000000000)='./file0\x00', 0x9) 12:57:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x8) 12:57:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 46) 12:57:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc2ef5002, 0x0) 12:57:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=@random={'btrfs.', 'debugfs\x00'}, &(0x7f0000000180)='debugfs\x00', 0x8, 0x1) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="08006d6c62306128a533cc4b96029d0b2601dd5d5e5931a46b53bffae7fffdc000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:57:13 executing program 7: truncate(&(0x7f0000000000)='./file0\x00', 0x9) 12:57:13 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)={0x8e, 0x7fff, 0x5, "0a2b89868403947b2eb5c78849c7c449af124b7d45db29d2fa58f99523b1b6e4cf18bd9227c1b7c321ffd46a0f2fa204e56a0b3f43f51d64c9833584e876f0591cbb1b06d0d7f950ccbafe2e8ba909f4dca8415a297197a7201c940732e558422af5e4858ee0d570c27030d00f3b47ae342dd651eb391a13d9eeade05bf29e1aa636a791bf0f1fca72bc37349e2c"}) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:57:13 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1) [ 3004.157268] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3004.157268] program syz-executor.1 not setting count and/or reply_len properly [ 3004.174444] FAULT_INJECTION: forcing a failure. [ 3004.174444] name failslab, interval 1, probability 0, space 0, times 0 [ 3004.176263] CPU: 1 UID: 0 PID: 44942 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3004.176302] Tainted: [W]=WARN [ 3004.176310] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3004.176324] Call Trace: [ 3004.176332] [ 3004.176342] dump_stack_lvl+0xfa/0x120 [ 3004.176388] should_fail_ex+0x4d7/0x5e0 [ 3004.176418] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3004.176450] should_failslab+0xc2/0x120 [ 3004.176481] __kmalloc_noprof+0xc8/0x6e0 [ 3004.176518] ? trace_kmalloc+0x1f/0xb0 [ 3004.176545] ? __kmalloc_noprof+0x29d/0x6e0 [ 3004.176578] ? bio_kmalloc+0x3e/0x70 [ 3004.176605] ? bio_copy_from_iter+0x192/0x270 [ 3004.176656] ? bio_kmalloc+0x3e/0x70 [ 3004.176682] bio_kmalloc+0x3e/0x70 [ 3004.176712] blk_rq_map_user_iov+0x390/0x1180 [ 3004.176762] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3004.176804] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3004.176841] ? find_held_lock+0x2b/0x80 [ 3004.176876] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3004.176902] ? lock_release+0xc8/0x290 [ 3004.176926] ? import_ubuf+0x1be/0x220 [ 3004.176959] blk_rq_map_user_io+0x1cf/0x200 [ 3004.176999] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3004.177037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3004.177079] ? irq_work_queue+0x9c/0x100 [ 3004.177113] ? __asan_memset+0x24/0x50 [ 3004.177143] sg_common_write.constprop.0+0xd75/0x1710 [ 3004.177180] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3004.177207] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3004.177241] ? ___ratelimit+0x465/0xa10 [ 3004.177284] sg_write.part.0+0x6a2/0xb50 [ 3004.177312] ? __pfx_sg_write.part.0+0x10/0x10 [ 3004.177341] ? perf_trace_lock+0xb5/0x5d0 [ 3004.177375] ? __pfx_perf_trace_lock+0x10/0x10 [ 3004.177409] ? lock_acquire+0x15e/0x2f0 [ 3004.177437] ? perf_trace_lock+0xb5/0x5d0 [ 3004.177463] ? find_held_lock+0x2b/0x80 [ 3004.177498] ? get_pid_task+0xfd/0x250 [ 3004.177525] ? perf_trace_lock+0xb5/0x5d0 [ 3004.177557] ? avc_policy_seqno+0x9/0x20 [ 3004.177577] ? selinux_file_permission+0x99/0x600 [ 3004.177618] sg_write+0x86/0xe0 [ 3004.177642] vfs_write+0x2b7/0x1150 [ 3004.177666] ? __pfx_sg_write+0x10/0x10 [ 3004.177690] ? lock_acquire+0x15e/0x2f0 [ 3004.177716] ? __fget_files+0x34/0x3b0 [ 3004.177741] ? __pfx_vfs_write+0x10/0x10 [ 3004.177766] ? __fget_files+0x203/0x3b0 [ 3004.177789] ? lock_release+0xc8/0x290 [ 3004.177821] ? __fget_files+0x20d/0x3b0 [ 3004.177856] ksys_write+0x121/0x240 [ 3004.177881] ? __pfx_ksys_write+0x10/0x10 [ 3004.177918] do_syscall_64+0xbf/0x360 [ 3004.177944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3004.177969] RIP: 0033:0x7efff4616b19 [ 3004.177987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3004.178010] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3004.178034] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3004.178050] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3004.178065] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3004.178080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3004.178094] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3004.178129] [ 3004.204598] program syz-executor.6 is using a deprecated SCSI ioctl, please convert it to SG_IO 12:57:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x80000) 12:57:13 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x5, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba}, 0x1200, 0x5, 0x80000001, 0x9, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, r2, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:57:13 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x54, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)=@random={'system.', 'trusted.overlay.opaque\x00'}, &(0x7f00000001c0)='!\\\x00]\x82\x8d\xfc\x81.VW4\x9bh\x94o\xd6\x8eG\xc3\"\x7f\xcb\xcb?\xb2\x8foD\x85\xfd\x81+T\x1e:\b\xc5\xedW\xfa\x8b\x8a!\xf33x\xcb\xbb\xa8\x93P\xcc\xbe*\x94H\xb4\xa1\xac4\x04\x86\x90\x1c', 0x41, 0x3) 12:57:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/dgv/n}llb0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:57:13 executing program 7: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) [ 3004.403196] Invalid option length (1047482) for dns_resolver key 12:57:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 47) 12:57:13 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xc9ffff) 12:57:13 executing program 3: mount(&(0x7f0000000040)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='jffs2\x00', 0x80840, &(0x7f0000000180)='[{-\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) accept4(r0, &(0x7f00000001c0)=@x25, &(0x7f0000000000)=0x80, 0x80800) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:57:13 executing program 2: capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000000)={0x0, 0x8000}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x204080, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:57:13 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='rootfs\x00', 0x200088, &(0x7f00000001c0)=':-\x00') [ 3004.622770] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3004.622770] program syz-executor.1 not setting count and/or reply_len properly 12:57:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 48) 12:57:26 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) set_tid_address(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:57:26 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0), &(0x7f0000000140), 0x2, 0x0) 12:57:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f646572ff06000000ffffff"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x8, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000180), 0x0, 0x8}, {&(0x7f00000001c0)="7332e429627a046d3021cba1da2963e326feb235d5417bd39b014cdf984c423ea229710c3ae620dc24faf5baefda94d3d70c849c9bae888f01493b4260d6fd9334559dae5626dc325c21ecf1beae84cd8f9cfb629a7d3ddacab093544f6c7d655a799a8161b4ebf8762c3ad151c0d37c915f7d9975973ca00a3da37f05ef14fec7e24a527cd8c805fe37fba9d5636c390fddd1c0d26488652df1c6bc3d6f649972347f73ac5a7469648852bc56ac7f6b4e27d306fc0dd504339bc328", 0xbc, 0x4}, {&(0x7f0000000280)="808c3fd614b1c9e4b59feb6c891a53dff398c5d506c7062dea60822a4cacd734fda3b548ce997dde73062796231e917ca831617b604f8aa10efadde63e8eaac7843f5aae5dfbcc252af83114e32473afbf8e08f1668ee52b171b40a2e1b75039bd412d401c6fdf74f3b6d233f597fcbe505f70128419a0667c171f0f7bbce7f6a5830bffde481165cb03", 0x8a, 0x20}, {&(0x7f0000000340)="cd17610769e6fa28339fb213db2074cd9a52d4214792f3bee48a2ad2cc53cbeeda49482b1c69087fa55875eea2751fe5fcc3f5d2adb59a00f82625953643366277fc4b8bedd42fc09f492570051b04a235e07166446bef0a30419cadebaef941b4", 0x61, 0x10001}, {&(0x7f00000003c0)="9cf29327c6f7f4d402437fcf10578d057a2bec8b5eea9e1e650c77a48f6d44d3edc364dbc868226dda1f8822782e8629eda4ab83ec20694683f1f5d05fcb3e5ff8ae6d7095a6c88d1f937dd50a2cac71cec9b3590a0ec6a71ede11c3012bb70e04d12aebe3b5a0c144c3e6542d81f8a564e52fdd0b4bfdf5c5d6cdbad74fe0d3d53d972102a22d29650bb5f07eac3078f7042dbd5c91d50cc89abbb35389ce792d035e84a419cefd392da944105d0c5a9d6549b062efa136532100e0df36fd87b49cde0739eccbfe433ee60c449c537d65f98a3e24a774fe0d", 0xd9, 0xcf4a}, {&(0x7f00000004c0)="6a1394d31d377dab83b38d2fe520d3a099427cff9105bb93d76d6f8aba362e4d63e5392bb46308087eb9a689391a8b08be0297ff12a6c284be255654e7c57e686326ef9c5560b54c07fba654b1be83364050cd4f5ea0dcc692dcc7f85d6c1758dd6089cdced6ae4c7dde378d86ccb4697e6aabfc29e3bbd0cc0d09cb3758493f98e02377710294b0af6eb4d162", 0x8d, 0x101}, {&(0x7f0000000580)="ae47d658cea57d99e3d29254199772a44ad3e16d73ff6551e6c8837e037db40719afce65ebbf22be886c170beed0d9eec4b4e4686df2ecdcc2ed8c967f5de26444c585b33fc4abd7228adda20c1015c814b7b2122c948473ec3d774b70e49faabbfd2c53180f655c9e0e492386bd0f72fb", 0x71, 0x8001}, {&(0x7f0000000600)="ef372bf6db861e77d3b7533f43c141486d33945121d898af52bcf8995c8789fa3c3d2e8257d1cd118724121b77db90abedbbc68cd2bf5c5c85b74b7bea1e09b4cbdb223b284235e50ca745cbc4b6da88d875313fb6a30bcb", 0x58, 0x1}, {&(0x7f0000000680)="119992e9b3058494957675b8d48019f47a60733fae3fa8b2cc2859", 0x1b, 0x1}], 0x1000000, &(0x7f00000007c0)={[{@gid={'gid', 0x3d, 0xee00}}, {@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x2d, 0x0, 0x30, 0x35]}}}}, {@mpol={'mpol', 0x3d, {'local', '=relative', @void}}}, {@huge_within_size}, {@huge_always}, {@uid={'uid', 0x3d, r1}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x35, 0x38, 0x25, 0x2d]}}, {@huge_always}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@appraise}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/nullb0\x00'}}, {@obj_type={'obj_type', 0x3d, '\\**'}}]}) chroot(&(0x7f0000000180)='./file0\x00') 12:57:26 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="f0ce74026bcad8b4cf7952835f39b4d3e16c2d3b7f62bcfc9cea0f09f55348eb22e241d6bc5e256eae449dc8bd5c6c1c1c367de13ac76c21888151f370ce77fc215b97637e308a91", 0x48, 0x1}], 0x1000, &(0x7f0000000200)={[{@huge_advise}, {@mode={'mode', 0x3d, 0x6}}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x67, 0x37, 0x2d]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x31, 0x38, 0x39, 0x22, 0x32]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x0, 0x30, 0x5f, 0x36, 0x65, 0x30]}}, {@mode={'mode', 0x3d, 0x5}}, {@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x16, 0x32, 0x2f, 0xb, 0x2c]}}}}], [{@func={'func', 0x3d, 'FILE_CHECK'}}, {@hash}]}) 12:57:26 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1000000) 12:57:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x400, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:57:26 executing program 7: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) [ 3017.421061] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3017.421061] program syz-executor.1 not setting count and/or reply_len properly [ 3017.423021] loop0: detected capacity change from 0 to 256 [ 3017.424379] tmpfs: Bad value for 'mpol' [ 3017.426023] FAULT_INJECTION: forcing a failure. [ 3017.426023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3017.427030] CPU: 1 UID: 0 PID: 45397 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3017.427050] Tainted: [W]=WARN [ 3017.427054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3017.427062] Call Trace: [ 3017.427066] [ 3017.427071] dump_stack_lvl+0xfa/0x120 [ 3017.427096] should_fail_ex+0x4d7/0x5e0 [ 3017.427114] _copy_from_iter+0x1dc/0x1660 [ 3017.427132] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3017.427148] ? do_raw_spin_lock+0x123/0x260 [ 3017.427166] ? __pfx__copy_from_iter+0x10/0x10 [ 3017.427180] ? find_held_lock+0x2b/0x80 [ 3017.427198] ? __create_object+0x59/0x80 [ 3017.427218] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3017.427235] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3017.427249] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3017.427268] copy_page_from_iter+0xe3/0x180 [ 3017.427286] bio_copy_from_iter+0x108/0x270 [ 3017.427310] blk_rq_map_user_iov+0xc07/0x1180 [ 3017.427335] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3017.427356] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3017.427375] ? find_held_lock+0x2b/0x80 [ 3017.427392] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3017.427406] ? lock_release+0xc8/0x290 [ 3017.427418] ? import_ubuf+0x1be/0x220 [ 3017.427434] blk_rq_map_user_io+0x1cf/0x200 [ 3017.427456] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3017.427479] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3017.427500] ? irq_work_queue+0x9c/0x100 [ 3017.427518] ? __asan_memset+0x24/0x50 [ 3017.427535] sg_common_write.constprop.0+0xd75/0x1710 [ 3017.427553] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3017.427567] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3017.427583] ? ___ratelimit+0x465/0xa10 [ 3017.427605] sg_write.part.0+0x6a2/0xb50 [ 3017.427619] ? __pfx_sg_write.part.0+0x10/0x10 [ 3017.427638] ? perf_trace_lock+0xb5/0x5d0 [ 3017.427654] ? __pfx_perf_trace_lock+0x10/0x10 [ 3017.427672] ? lock_acquire+0x15e/0x2f0 [ 3017.427686] ? perf_trace_lock+0xb5/0x5d0 [ 3017.427698] ? find_held_lock+0x2b/0x80 [ 3017.427716] ? get_pid_task+0xfd/0x250 [ 3017.427730] ? perf_trace_lock+0xb5/0x5d0 [ 3017.427746] ? avc_policy_seqno+0x9/0x20 [ 3017.427757] ? selinux_file_permission+0x99/0x600 [ 3017.427778] sg_write+0x86/0xe0 [ 3017.427789] vfs_write+0x2b7/0x1150 [ 3017.427802] ? __pfx_sg_write+0x10/0x10 [ 3017.427814] ? lock_acquire+0x15e/0x2f0 [ 3017.427827] ? __fget_files+0x34/0x3b0 [ 3017.427839] ? __pfx_vfs_write+0x10/0x10 [ 3017.427851] ? __fget_files+0x203/0x3b0 [ 3017.427863] ? lock_release+0xc8/0x290 [ 3017.427879] ? __fget_files+0x20d/0x3b0 [ 3017.427897] ksys_write+0x121/0x240 [ 3017.427909] ? __pfx_ksys_write+0x10/0x10 [ 3017.427928] do_syscall_64+0xbf/0x360 [ 3017.427942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3017.427954] RIP: 0033:0x7efff4616b19 [ 3017.427964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3017.427976] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3017.427989] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3017.427997] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3017.428004] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3017.428012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3017.428019] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3017.428036] [ 3017.505758] Invalid option length (1047482) for dns_resolver key 12:57:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 12:57:26 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f00000000c0)) r4 = signalfd4(r2, &(0x7f0000000100)={[0x3]}, 0x8, 0x80000) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000140)) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x5, 0x4, 0x6, 0x7, 0xc, "9561fb976a5dced77bf5b785428d2853fcae30"}) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 12:57:26 executing program 7: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x9) 12:57:26 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x2000000) [ 3018.459858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3018.461149] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3018.461897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 3018.462598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3018.464231] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 3018.466292] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3018.468388] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 3018.470161] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3019.666706] Bluetooth: hci0: command 0x0406 tx timeout [ 3020.498773] Bluetooth: hci6: command 0x0406 tx timeout [ 3020.500216] Bluetooth: hci7: command 0x0406 tx timeout [ 3020.500549] Bluetooth: hci5: command 0x0406 tx timeout [ 3020.500819] Bluetooth: hci4: command 0x0406 tx timeout [ 3020.500844] Bluetooth: hci3: command 0x0406 tx timeout [ 3020.500867] Bluetooth: hci2: command 0x0406 tx timeout [ 3020.502250] Bluetooth: hci1: command 0x0406 tx timeout 12:57:38 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x8cffffff) 12:57:38 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) 12:57:38 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)='&\x00', r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:57:38 executing program 6: getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)={'filter\x00', 0x0, [0xffffffff, 0x1f, 0x10000, 0x18]}, &(0x7f0000000300)=0x54) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x84) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = gettid() capset(&(0x7f0000000080)={0x20071026, r3}, &(0x7f0000000000)) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r5, r4) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='net/raw6\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472614f735e38291aba6664b7d83c", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x54, r9, 0x300, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xd, 0x80, [@mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x61}}]}, @NL80211_ATTR_BEACON_TAIL={0x16, 0xf, [@mic={0x8c, 0x10, {0x102, "fc3694950d69", @short="31747ac637204112"}}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @ibss={0x6, 0x2, 0x7ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x8004005) r11 = dup2(r0, r1) ioctl$SG_GET_TIMEOUT(r11, 0x2202, 0x0) 12:57:38 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x0, 0x252, 0x4, 0x5, 0x200, 0x5}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:57:38 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x9) 12:57:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 49) 12:57:38 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x438, 0x3f3, 0x400, 0x70bd28, 0x25dfdbfc, {0x6, 0x0, 0x11, [0x2, 0xffffff01, 0x9, 0xbea9, 0x6, 0x6, 0x9, 0x81, 0x4, 0xff, 0x1, 0x9, 0x7, 0x3, 0xfffffc00, 0x0, 0x3, 0x6, 0x1c, 0xfff, 0x1, 0x9, 0xfffffff9, 0x6, 0x1, 0x4, 0x7, 0x3ff, 0x9, 0x2, 0x5, 0x40, 0x3, 0x800, 0x0, 0x2, 0xfff, 0x41, 0x97fa, 0x8, 0xffffffff, 0x7fffffff, 0x4, 0xfc48, 0x2, 0xffff, 0x8, 0x20, 0x40, 0xff, 0x80, 0x9, 0xecbe, 0x8001, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xc, 0x81, 0x3, 0x3, 0xed], [0x200, 0x7, 0xffffffb2, 0xff, 0x1ff, 0x400, 0xffffffff, 0x7, 0x3b, 0x7, 0x7f, 0xed9, 0x7, 0xb99f, 0x91, 0x2, 0xffffffe0, 0x8001, 0x7fffffff, 0x1, 0x8, 0x4a, 0x51fc, 0x81, 0x8, 0x5a, 0x8001, 0x0, 0x4, 0x3b, 0x3, 0xd316, 0x599, 0x7, 0x6, 0x6, 0x44, 0x6, 0x401, 0xfffffff7, 0x80000001, 0x9, 0x1000, 0x0, 0x6, 0x8, 0x7, 0x7f, 0x0, 0xa6f, 0x0, 0x6, 0x8, 0x1, 0x1000, 0x10001, 0xfff, 0xff, 0x7f, 0x3ff, 0x4, 0x7fffffff, 0x80000001, 0x8], [0x1, 0x10001, 0xec9, 0x3, 0x0, 0x9, 0x0, 0x6, 0x1ff, 0x53, 0x2, 0xfffffffe, 0xa491, 0x401, 0x1, 0x7, 0x3, 0xffff12dc, 0x8, 0x80000000, 0x1, 0xff, 0x80000001, 0x1, 0x2, 0x81, 0x1, 0x8, 0x9, 0x2, 0xa0, 0xffff, 0x10000, 0x8, 0x4, 0xffffffff, 0x81, 0x4, 0x4, 0x0, 0x7, 0x80000001, 0x5, 0x2, 0x3f, 0x1ff, 0x7fff, 0x5, 0x7fffffff, 0x0, 0x5, 0x7, 0xc23, 0x0, 0x0, 0x6, 0x3f, 0xffffffff, 0x7fffffff, 0xffffffff, 0x4, 0x8, 0x3f, 0x401], [0x8000, 0x7, 0x4, 0x7f, 0x9, 0x2, 0xfffffff7, 0x3, 0x7, 0xa21, 0x1, 0x6, 0x1, 0xfff, 0x7fffffff, 0x5, 0x1f, 0x28f, 0x1, 0x1, 0x7bd2, 0x7fffffff, 0x8, 0xff, 0x1, 0x2, 0x1ff, 0x0, 0x3, 0x7fff, 0x8, 0x81, 0x21, 0xfffffff7, 0x0, 0x49, 0xfffffffe, 0x80000000, 0xff, 0x40, 0x68, 0x7, 0xa705, 0x6, 0xffffffff, 0x75bf55b8, 0x2, 0x3, 0x1, 0xaf, 0xe0, 0x800, 0x10001, 0xde9, 0x0, 0x80000000, 0x3, 0x9, 0x1f3, 0x8, 0x6, 0x9, 0x7, 0xffff], 0x15, ['debugfs\x00', 'debugfs\x00', '-#-&\x00']}, ["", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x40010}, 0x40004) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 3029.180537] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3029.180537] program syz-executor.1 not setting count and/or reply_len properly [ 3029.184044] FAULT_INJECTION: forcing a failure. [ 3029.184044] name failslab, interval 1, probability 0, space 0, times 0 [ 3029.185046] CPU: 1 UID: 0 PID: 45740 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3029.185067] Tainted: [W]=WARN [ 3029.185071] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3029.185078] Call Trace: [ 3029.185083] [ 3029.185088] dump_stack_lvl+0xfa/0x120 [ 3029.185113] should_fail_ex+0x4d7/0x5e0 [ 3029.185132] should_failslab+0xc2/0x120 [ 3029.185149] __kmalloc_noprof+0xc8/0x6e0 [ 3029.185167] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3029.185187] ? bio_copy_from_iter+0x192/0x270 [ 3029.185206] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3029.185228] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3029.185245] blk_rq_map_user_iov+0x1fd/0x1180 [ 3029.185270] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3029.185292] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3029.185312] ? find_held_lock+0x2b/0x80 [ 3029.185330] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3029.185344] ? lock_release+0xc8/0x290 [ 3029.185356] ? import_ubuf+0x1be/0x220 [ 3029.185374] blk_rq_map_user_io+0x1cf/0x200 [ 3029.185394] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3029.185413] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3029.185435] ? irq_work_queue+0x9c/0x100 [ 3029.185453] ? __asan_memset+0x24/0x50 [ 3029.185468] sg_common_write.constprop.0+0xd75/0x1710 [ 3029.185487] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3029.185500] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3029.185517] ? ___ratelimit+0x465/0xa10 [ 3029.185539] sg_write.part.0+0x6a2/0xb50 [ 3029.185552] ? __pfx_sg_write.part.0+0x10/0x10 [ 3029.185567] ? perf_trace_lock+0xb5/0x5d0 [ 3029.185584] ? __pfx_perf_trace_lock+0x10/0x10 [ 3029.185601] ? lock_acquire+0x15e/0x2f0 [ 3029.185616] ? perf_trace_lock+0xb5/0x5d0 [ 3029.185633] ? find_held_lock+0x2b/0x80 [ 3029.185650] ? get_pid_task+0xfd/0x250 [ 3029.185665] ? perf_trace_lock+0xb5/0x5d0 [ 3029.185680] ? avc_policy_seqno+0x9/0x20 [ 3029.185691] ? selinux_file_permission+0x99/0x600 [ 3029.185713] sg_write+0x86/0xe0 [ 3029.185725] vfs_write+0x2b7/0x1150 [ 3029.185738] ? __pfx_sg_write+0x10/0x10 [ 3029.185750] ? lock_acquire+0x15e/0x2f0 [ 3029.185763] ? __fget_files+0x34/0x3b0 [ 3029.185776] ? __pfx_vfs_write+0x10/0x10 [ 3029.185788] ? __fget_files+0x203/0x3b0 [ 3029.185800] ? lock_release+0xc8/0x290 [ 3029.185816] ? __fget_files+0x20d/0x3b0 [ 3029.185834] ksys_write+0x121/0x240 [ 3029.185846] ? __pfx_ksys_write+0x10/0x10 [ 3029.185865] do_syscall_64+0xbf/0x360 [ 3029.185879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3029.185893] RIP: 0033:0x7efff4616b19 [ 3029.185902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3029.185914] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3029.185927] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3029.185935] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3029.185943] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3029.185950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3029.185957] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3029.185975] 12:57:38 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xf6ffffff) [ 3029.236241] Invalid option length (1047482) for dns_resolver key 12:57:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 50) 12:57:38 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x9) [ 3029.400528] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3029.400528] program syz-executor.1 not setting count and/or reply_len properly 12:57:49 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xffffff8c) 12:57:49 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14, 0x80000) sendmsg$sock(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="49965662adcf786eea389853a54387a74f5e0a746e3979590c5fa71ae794110f39264c254a0c37cac9f28117a0d1db225495baabb61d1d214567ad287fd7f2f8e39b041bd65d0ee78dfc792647a0575d47666fee712251669383d86bbcdfcaf2c4e8de4ae097e5ce7755ccff0901c2440d1815896b54d1339617529adc67b78afd9d58ab3650274d07df9c9ba016fc2eed56c289033884237900fa51a811c0efd05953cd1aab9ff51e", 0xa9}, {&(0x7f0000001200)="443a546a6fcab556fb7e634e5c4c684e3ddd5047b5d070a7b1d0ae791777b1001c616696801f1f4f734aa4fe7e23c388e4fdc512439c8c316062edee54359adb05e1fedf609750b1505e2b860bdd51287edb87329ddfaa7f3436b4f100a7cc67f47019850e59f16ee64e7ae5516f27bf26da0251", 0x74}, {&(0x7f0000001280)="4a958370698d69", 0x7}, {&(0x7f00000012c0)="e41558deb6a97c47c4fb1855c99a375dca0170d384e05ffde07b12a2672e2ca36585a297143ed62ddf49c2238a4c77a7a04ab08db3891e945d8da3c23bcb03aed0959c30fe5b81bca34334f5015d116aced4529b600ce6c48cdf068252d463fd4a0d5f7a59c6d1c15a4f49a055dfbfb563028404466d60870add2db5dd6c182bc2206e1d7ef3469455b8a7bc70bd0c4edbc7a00352b312da", 0x98}], 0x5, &(0x7f0000001400)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}], 0x18}, 0x40000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:57:49 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r2) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0xc8, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfa1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:57:49 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) capset(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x7, 0x4, 0x846, 0x7, 0x9, 0x6}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x100002, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRESDEC, @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRES16=r2, @ANYRES64=r2]) 12:57:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 51) 12:57:49 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x9) 12:57:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x581001, 0x0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:57:49 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 3040.542827] debugfs: Bad value for 'source' [ 3040.551849] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3040.551849] program syz-executor.1 not setting count and/or reply_len properly [ 3040.557323] Invalid option length (1047482) for dns_resolver key [ 3040.570017] FAULT_INJECTION: forcing a failure. [ 3040.570017] name failslab, interval 1, probability 0, space 0, times 0 [ 3040.571728] CPU: 0 UID: 0 PID: 46181 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3040.571765] Tainted: [W]=WARN [ 3040.571772] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3040.571785] Call Trace: [ 3040.571794] [ 3040.571803] dump_stack_lvl+0xfa/0x120 [ 3040.571846] should_fail_ex+0x4d7/0x5e0 [ 3040.571874] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3040.571905] should_failslab+0xc2/0x120 [ 3040.571934] __kmalloc_noprof+0xc8/0x6e0 [ 3040.571968] ? trace_kmalloc+0x1f/0xb0 [ 3040.571994] ? __kmalloc_noprof+0x29d/0x6e0 [ 3040.572026] ? bio_kmalloc+0x3e/0x70 [ 3040.572053] ? bio_copy_from_iter+0x192/0x270 [ 3040.572095] ? bio_kmalloc+0x3e/0x70 [ 3040.572120] bio_kmalloc+0x3e/0x70 [ 3040.572148] blk_rq_map_user_iov+0x390/0x1180 [ 3040.572196] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3040.572238] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3040.572273] ? find_held_lock+0x2b/0x80 [ 3040.572307] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3040.572332] ? lock_release+0xc8/0x290 [ 3040.572356] ? import_ubuf+0x1be/0x220 [ 3040.572388] blk_rq_map_user_io+0x1cf/0x200 [ 3040.572427] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3040.572464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3040.572505] ? irq_work_queue+0x9c/0x100 [ 3040.572537] ? __asan_memset+0x24/0x50 [ 3040.572566] sg_common_write.constprop.0+0xd75/0x1710 [ 3040.572602] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3040.572635] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3040.572667] ? ___ratelimit+0x465/0xa10 [ 3040.572709] sg_write.part.0+0x6a2/0xb50 [ 3040.572735] ? __pfx_sg_write.part.0+0x10/0x10 [ 3040.572764] ? perf_trace_lock+0xb5/0x5d0 [ 3040.572795] ? __pfx_perf_trace_lock+0x10/0x10 [ 3040.572828] ? lock_acquire+0x15e/0x2f0 [ 3040.572855] ? perf_trace_lock+0xb5/0x5d0 [ 3040.572879] ? find_held_lock+0x2b/0x80 [ 3040.572913] ? get_pid_task+0xfd/0x250 [ 3040.572939] ? perf_trace_lock+0xb5/0x5d0 [ 3040.572969] ? avc_policy_seqno+0x9/0x20 [ 3040.572989] ? selinux_file_permission+0x99/0x600 [ 3040.573028] sg_write+0x86/0xe0 12:57:49 executing program 7: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x0) [ 3040.573051] vfs_write+0x2b7/0x1150 [ 3040.573074] ? __pfx_sg_write+0x10/0x10 [ 3040.573096] ? lock_acquire+0x15e/0x2f0 [ 3040.573121] ? __fget_files+0x34/0x3b0 [ 3040.573144] ? __pfx_vfs_write+0x10/0x10 [ 3040.573168] ? __fget_files+0x203/0x3b0 [ 3040.573190] ? lock_release+0xc8/0x290 [ 3040.573221] ? __fget_files+0x20d/0x3b0 [ 3040.573256] ksys_write+0x121/0x240 [ 3040.573280] ? __pfx_ksys_write+0x10/0x10 [ 3040.573316] do_syscall_64+0xbf/0x360 [ 3040.573340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3040.573364] RIP: 0033:0x7efff4616b19 [ 3040.573383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3040.573405] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3040.573428] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3040.573444] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3040.573459] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3040.573473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3040.573486] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3040.573520] 12:57:49 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xfffffff6) 12:57:49 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:57:49 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x3, 0xfffffffffffffea2, 0x0, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000400), &(0x7f0000000440)='\x00', 0x9, 0x3, &(0x7f0000000e80)=[{&(0x7f0000000d40)="cf3fbdb057950e9297bf04a345f04c3bb29b04f93a15055785a0275e006ee3038b6bfa", 0x23, 0x8}, {&(0x7f00000004c0)="42a92ce620857ec365776443cebaf4338063a0b567712bf4ce12a349e6d5fba03eab975e241bdd4975810ba046651c66d68f1bfb9ca7930823b157", 0x3b, 0x3}, {&(0x7f0000000f00)="e8a343d65bd6cedb1cd46c5eacf4b57beead3cad63c92ede7e937fa3fb90fa2c4c93872502c12244130244d927835b92d464ba8112670f11f86290b85012201fae565195bd333d14e35d1753d122f2dd5c5a2f89900e42d7dfa9d7f2a5c71d9256a17e3bd0cbfe957ee346413355613858e5e5e3f421b60b6aebb1b06e3c2ffb022469e9d2df9065a933a581c105b20bab4b86bb6a8064c624f264ddd25501db5ca8716e5f9e7948fa34d6c49a7e6bd5f7214e32e74d73dfcc5bff37fa9702ce36028431dc64d820cf10e7269a6c6a3157a4baa4a001b2af932d8325f3c65d01662b2ff91c6fda1e9a386358c1909d0e34ad6d32b59e4d83c5", 0xf9, 0x7fff}], 0x100d, &(0x7f0000000540)=ANY=[@ANYBLOB="067766646e6f2c66642f33002c2c6d6561737572652c66756e633d46494c455f434845434b2c6f080000007970653d2c736d69636b6673746e733d66642c2c00"]) mount(&(0x7f0000000d00)=ANY=[@ANYBLOB="2f64650001000000100000002f2ed2c8c4"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x9, 0x8, &(0x7f0000000b00)=[{&(0x7f0000000600)="c5d992799bfcdf4f872c60e862d69b9739c93fc4c218d805175c4527ae1a14dc51cfba370afe3ff9b4d34ade9e1e672ddba03dc96231b52549c2ce8d55ecd2c97dffb060b28c7283fd830c6098c55f12dad68beda621962d1ccd07136485ba60edf1f54651affc2af7f74a2831781d56df94e1e56adbc3d7b3ffb5376070eb071370d88837dca48de6f8ab46490d0a647366289cc42df8ce1fb86384fdc05a070e39a342d8ee1d9c41b090b2709c84e308ee478ba3cda51c26ecf8", 0xbb, 0x8000}, {&(0x7f00000006c0)="6135f879925f891f3da813112a4dd8f9be0c611f5c96e0f1c7025306cbf3d79659034368135fcdfae5faad6df010341ee7a0fbab8367ba4cced330792c9ba5bc1f153e58f2fae6149179ceca7bc911269cd105922579b62319230ed7570b2aa96e42a42d62ef840e0512e6f7fea42d02c54e78fbc6a017e5e57c65a33f95c83a7f408c101cdafb7f6bd69c8548688ba440d52f1bdfca2ae8bde8342989e9ed757186728ad68ce30bbac574aa732dd4cabc9e53ed8e4133010a6889825e98df4434b22f6f0d15cb69bb57fb", 0xcb, 0x2}, {&(0x7f00000007c0)="9c08a211338852dc2007790f526ab01fd2eb982bf97eab74d7ef3dbb24f9c8365d1d8ea8c0c2433d239ab602f1841654f57e37e5063427a1ea3240b1178031d9993c484d53bd9fa149c8789c79ccc7d1afab0632928030739ab22ae7d1200bdb0ee3ae787c34d17516a90a98a33d4298f805fd1f790b371bf692fdec6354dc3ad8ea9f3320492fea0553e61ef8d590de9e4be8be4408589e4a1c2d1172982e4e8c0d88b31bab2e0bbf6330ac80c4fb0e965ad4c109f28f61addf7622ebd1d9720eacdf3aaa94509391615fdbe127a12025b7483fb38cbe587f6ef2c8aeb08e49", 0xe0, 0x9}, {&(0x7f00000008c0)="cfa2c67a2d65dfc8fb9707c0d81fd220729665239b614276ead87931dca220568d217886684c", 0x26, 0xf52}, {&(0x7f0000000900)="b1eefbdd05fcf88c464deeb9a03e5d0465d4c4e0320276a8c5615414d8d0f13b6093032e97e75b60da2ca87dec1c66a413a9fda2193a4e5cd5667f34f3939dcba905bd2ea1393dfac09fce6369b6", 0x4e, 0xff}, {&(0x7f0000000980)="0f29784f933e2becd056581f985123470ae7b51ef2f60472c8823b222bbab8c58ad5b46b4929525ef242fb30a0be17b6e1f1fefae2c8b00c0baca4160f05a7cc9b71b69f6d56ae00a6db78b07364ca6764f6b919c18f0ed7c6c0dada7a1cdf0be718ca01a6c64e3c0e1e5d0d2a71017ef9a6b34a30fe62ccb0cc2fd7791c711cf23377ef796b29b9a40cc7a06aa7302a2d40f75ea8d8bd054f8516d5faebd6e08203faf4532d5b0ef6", 0xa9, 0x800}, {&(0x7f0000000a40)="9e4264b6962eb482db77e5cb7a6e7fffd1237b9cabf922781047f1b5fcbf14fbb2ef9648dadb5ac4e3f19b0edb1c0e8f4939bd4856d8bda09b61eae1cd4a2ff9de0991677ce579ebb17fcc810ce95dccac38f95ce86104197ab86510c7f2e06d4606f754016e29f4f00f2189d6399bff", 0x70, 0x2}, {&(0x7f0000000ac0)="b3b57cd3433ae99e2311fcb99de7f2ff3b0b74cc", 0x14, 0x8}], 0x1000, &(0x7f0000000bc0)={[{@data_err_abort}, {@nolazytime}, {@nojournal_checksum}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@measure}, {@fowner_lt={'fowner<', 0xee00}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt={'fowner<', 0xee00}}, {@appraise_type}, {@obj_type={'obj_type', 0x3d, 'obj_type'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '@$)'}}]}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000580)) move_mount(r3, &(0x7f0000000cc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x31) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) utimes(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x77359400}}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount(&(0x7f00000002c0)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)='bfs\x00', 0x80080, &(0x7f00000003c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) lseek(r0, 0x8, 0x4) accept$unix(r4, &(0x7f0000000140), &(0x7f0000000000)=0x6e) mkdirat(r5, &(0x7f0000000480)='./file0\x00', 0x9e) 12:57:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 52) [ 3040.854109] loop0: detected capacity change from 0 to 127 12:57:50 executing program 2: r0 = getpid() rt_tgsigqueueinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x3, 0xffffffff, 0x8}) syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:57:50 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x5, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xba}, 0x1200, 0x5, 0x80000001, 0x9, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, r2, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 3040.974958] loop0: detected capacity change from 0 to 128 12:57:50 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x8000000000000) [ 3041.042520] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3041.042520] program syz-executor.1 not setting count and/or reply_len properly 12:57:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000040)=0x5) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/amd_uncore', 0x302, 0x6) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x81) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:57:50 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc06d6040, 0x0) pivot_root(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r3, r2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x3c, 0x7, &(0x7f00000006c0)=[{&(0x7f0000000140)="a2b9ccd7a90e49d205", 0x9, 0x3}, {&(0x7f0000000780)="9d866a855c139fccb044b8d6a1bb99713d99d577cac426a5789fe70cb5bacdf2070e0b19b4c99355e61ea3f8ae0fcf39ee76eba5a54e34fabbddf1bb2f479a0ea3c53eee9827f8570eb699026955b297c0e0cec27c24a68ef46e0d277718fde246f129e7560bc303e2ae246e307b543bef43f1fa7f75f9cccf42dc461a7b27600cc14aea7434df82d97170b18d4829f7f6b4e457fcc8d3de7a2330fd8870c60e1020d4b819dc1f67ac56da6717bfc0b13d8717658fe04568e5520c64fb420000000000", 0xc3, 0x2}, {&(0x7f0000000240)="c9d12349addbea5055faf4eb549df3a9aa5e7b741709d14b3055ef0bc2533420b863e35bf9afce1eaba501545172988844a841ffcc1fd47147bf6a09504df7c95ebd1d83b92f011a0ae3bd6398ae21e845ff2f9d330c0c3b969f523c79360f1a767703a3262b03cd50e5c394e858ad9d874341cda6ca3b214d121411331d282a5d5d39208a9fa3227b04ccbd8020b416e2bd7bc7774303e268ee97ad18bf856cf96c6a890dc3d6c2af76c8e3b7c4aec7b509", 0xb2, 0x3ff}, {&(0x7f0000000300)="c092db053855a27d78916667929223c8aabd4ffd7492c93d107c33ac7d90f7fa8c92e5e3b37d857722af19325a99da94e362bc34c5ffa1ac47b2d92d3c7bbc0abfdad32a6ca01251dc017762b9576881bd145a721ce6f03eb3341bd37a8f587e31b7abc6a5e733928728acbed4b26831a21b1c88a6a7a001ae47842bc601339ab6a3e53f8cc5b42246806d0f3352fd35488afcee8b65b819211aafadc81df138f736a6e398777f6d215600"/185, 0xb9, 0x6}, {&(0x7f00000003c0)="805c00f5a30ed99649296711de2bf0cbe0e9dd2c72fd3c18eafde221a3e2198b3642dd3453e29301339e19ff9d53a6886c24e283ac11720b8bb089eb3da9bc2b83b1a9ccbcd2cfbd6d124a37aa4055cdc88fcbc97c24fb47cbac8c2244844d520f44cbe7256ce9d7f4aa7f9d012f28b8da5b546208590c79e52fd7914a587c21850c4a12408803835a6c200aa890b6ab4db09881e6ca8f71e295740edd6b1b04f324be9ea17f952a4e7228f00280607772f9b16ee4baceb9d765195bea55668e518b64df82079a3fde0313d694731a6f2a33811786ec08e60054e92709cf0be9dcc917f15697d86bf35b5860894df1", 0xef, 0x1}, {&(0x7f00000004c0)="338d382381f8f872e159ba8ada0450db62c91b05f3fa3310f2aa41f2f588394c50d96368fdd9589e95fa1b2de1a78a2f1bc0d21afefc2c879f7c24e564c5795212313440aa55963ca6e302a233fcfa23151631b6b3573c236c5014dc5e4653ff149c64374e6b84bd546701e6b8f526da5e1bd26b50af9e49500bd32ff9e2cae3e8b14f38ad6206f0c7d5d199e0c05b74c49586a9059941c02160d84abb11c8492c8278abf8bd67c74a773d29b6d1d68947080348fc07a00034c5c1422232306bbda6a782", 0xc4, 0x9a28}, {&(0x7f00000005c0)="6931f068f19774f4c5ea49f00ec029df23b3e1f1b7305051517dd90c2ca4ae78288cc014f4b62de20100e6bd0636b704a873d9e35615afc80a0a067b0f44d788747767a90b9e105177a398058030c237e3628b75d9daa56265b30ec6c9999d283afa975e8e2fff0cf35539df5bbaa75cad759b2de24e51fa62cf2a781370ca7e93732ce1e209c846e433dd89e53bab7b68456b3b0d3f1e489113ecad14d101552c965dc6cb482c9674893551de132af363f24819b48cf391b7d4874eb0644cc55ee41c5069374ab5ad7933fab31d8dd2ce7f4f460f954342feeca511821677e497069994c2e2a3febd941307", 0xec, 0x3479}], 0x804, &(0x7f0000000b40)=ANY=[@ANYRESDEC, @ANYRESHEX=0xee01, @ANYRESDEC=r5, @ANYRESDEC=r2, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',euid>', @ANYRESOCT=r4, @ANYBLOB=',\x00']) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000008c0), &(0x7f0000000900)=0xc) mknodat$loop(r0, &(0x7f0000000880)='./file0\x00', 0x4, 0x0) [ 3041.154699] Invalid option length (1047482) for dns_resolver key 12:57:50 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() r2 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f00000002c0)={'fscrypt:', @desc1}, &(0x7f00000004c0)={0x0, "82af435b61e5143b36a58b06b8159d3716c7bef488b88bdda3f4f2d17125611da0e651703ceae2ca9b54d5f69ec80bc1b2413d8bee58e356f62fe5add5aafcaf", 0x17}, 0x48, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r2, 0x1) munlockall() [ 3041.193581] 9pnet_fd: Insufficient options for proto=fd 12:57:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 53) [ 3041.205553] loop3: detected capacity change from 0 to 154 12:57:50 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x100000000000000) [ 3041.217588] tmpfs: Unknown parameter '184467440737095516150x000000000000ee010000000000000000000600000000004294967295' 12:57:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x4, 0x88002) r4 = dup2(r3, r0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) [ 3041.289069] Invalid option length (1047482) for dns_resolver key [ 3041.367010] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3041.367010] program syz-executor.1 not setting count and/or reply_len properly [ 3041.381264] FAULT_INJECTION: forcing a failure. [ 3041.381264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3041.383093] CPU: 0 UID: 0 PID: 46691 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3041.383132] Tainted: [W]=WARN [ 3041.383140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3041.383154] Call Trace: [ 3041.383163] [ 3041.383172] dump_stack_lvl+0xfa/0x120 [ 3041.383216] should_fail_ex+0x4d7/0x5e0 [ 3041.383251] _copy_from_iter+0x1dc/0x1660 [ 3041.383285] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3041.383315] ? do_raw_spin_lock+0x123/0x260 [ 3041.383349] ? __pfx__copy_from_iter+0x10/0x10 [ 3041.383377] ? find_held_lock+0x2b/0x80 [ 3041.383413] ? __create_object+0x59/0x80 [ 3041.383450] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3041.383483] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3041.383509] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3041.383547] copy_page_from_iter+0xe3/0x180 [ 3041.383583] bio_copy_from_iter+0x108/0x270 [ 3041.383639] blk_rq_map_user_iov+0xc07/0x1180 [ 3041.383688] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3041.383731] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3041.383767] ? find_held_lock+0x2b/0x80 [ 3041.383801] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3041.383828] ? lock_release+0xc8/0x290 [ 3041.383853] ? import_ubuf+0x1be/0x220 [ 3041.383885] blk_rq_map_user_io+0x1cf/0x200 [ 3041.383925] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3041.383963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3041.384004] ? irq_work_queue+0x9c/0x100 [ 3041.384037] ? __asan_memset+0x24/0x50 [ 3041.384068] sg_common_write.constprop.0+0xd75/0x1710 [ 3041.384106] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3041.384133] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3041.384166] ? ___ratelimit+0x465/0xa10 [ 3041.384209] sg_write.part.0+0x6a2/0xb50 [ 3041.384236] ? __pfx_sg_write.part.0+0x10/0x10 [ 3041.384266] ? perf_trace_lock+0xb5/0x5d0 [ 3041.384299] ? __pfx_perf_trace_lock+0x10/0x10 [ 3041.384333] ? lock_acquire+0x15e/0x2f0 [ 3041.384361] ? perf_trace_lock+0xb5/0x5d0 [ 3041.384387] ? find_held_lock+0x2b/0x80 [ 3041.384422] ? get_pid_task+0xfd/0x250 [ 3041.384450] ? perf_trace_lock+0xb5/0x5d0 [ 3041.384481] ? avc_policy_seqno+0x9/0x20 [ 3041.384502] ? selinux_file_permission+0x99/0x600 [ 3041.384543] sg_write+0x86/0xe0 [ 3041.384566] vfs_write+0x2b7/0x1150 [ 3041.384590] ? __pfx_sg_write+0x10/0x10 [ 3041.384613] ? lock_acquire+0x15e/0x2f0 [ 3041.384640] ? __fget_files+0x34/0x3b0 [ 3041.384664] ? __pfx_vfs_write+0x10/0x10 [ 3041.384689] ? __fget_files+0x203/0x3b0 [ 3041.384712] ? lock_release+0xc8/0x290 [ 3041.384744] ? __fget_files+0x20d/0x3b0 [ 3041.384781] ksys_write+0x121/0x240 [ 3041.384806] ? __pfx_ksys_write+0x10/0x10 [ 3041.384843] do_syscall_64+0xbf/0x360 [ 3041.384868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3041.384893] RIP: 0033:0x7efff4616b19 [ 3041.384913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3041.384936] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3041.384959] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3041.384976] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3041.384991] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3041.385005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3041.385020] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3041.385055] [ 3041.666152] loop0: detected capacity change from 0 to 127 12:58:02 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x200000000000000) 12:58:02 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000180)) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000040)={0x20071026, r0}, &(0x7f00000000c0)={0x1000, 0x7, 0x7, 0x1010000, 0x0, 0x5}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:58:02 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='squashfs\x00', 0xc0ed0000, 0x0) 12:58:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 54) 12:58:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = dup2(r0, r0) r4 = dup2(r2, r3) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:58:02 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r1) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r2) r3 = perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x40, 0x3f, 0x2, 0x0, 0xffff, 0x12d18, 0x11, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffff00, 0x4, @perf_config_ext={0x2, 0x2}, 0x12022, 0x0, 0x3, 0x8, 0x2, 0x8, 0x5, 0x0, 0x6, 0x0, 0x3}, r4, 0xf, r0, 0x1) munlockall() munlockall() 12:58:02 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:58:02 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='\x00') [ 3053.593890] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3053.593890] program syz-executor.1 not setting count and/or reply_len properly [ 3053.608190] FAULT_INJECTION: forcing a failure. [ 3053.608190] name failslab, interval 1, probability 0, space 0, times 0 [ 3053.609213] CPU: 1 UID: 0 PID: 46942 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3053.609234] Tainted: [W]=WARN [ 3053.609239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3053.609247] Call Trace: [ 3053.609252] [ 3053.609257] dump_stack_lvl+0xfa/0x120 [ 3053.609285] should_fail_ex+0x4d7/0x5e0 [ 3053.609306] should_failslab+0xc2/0x120 [ 3053.609323] __kmalloc_noprof+0xc8/0x6e0 [ 3053.609342] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3053.609362] ? bio_copy_from_iter+0x192/0x270 [ 3053.609381] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3053.609403] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3053.609421] blk_rq_map_user_iov+0x1fd/0x1180 [ 3053.609445] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3053.609467] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3053.609487] ? find_held_lock+0x2b/0x80 [ 3053.609506] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3053.609521] ? lock_release+0xc8/0x290 [ 3053.609533] ? import_ubuf+0x1be/0x220 [ 3053.609551] blk_rq_map_user_io+0x1cf/0x200 [ 3053.609572] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3053.609591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3053.609613] ? irq_work_queue+0x9c/0x100 [ 3053.609634] ? __asan_memset+0x24/0x50 [ 3053.609650] sg_common_write.constprop.0+0xd75/0x1710 [ 3053.609669] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3053.609682] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3053.609700] ? ___ratelimit+0x465/0xa10 [ 3053.609722] sg_write.part.0+0x6a2/0xb50 [ 3053.609736] ? __pfx_sg_write.part.0+0x10/0x10 [ 3053.609751] ? perf_trace_lock+0xb5/0x5d0 [ 3053.609768] ? __pfx_perf_trace_lock+0x10/0x10 [ 3053.609785] ? lock_acquire+0x15e/0x2f0 [ 3053.609800] ? perf_trace_lock+0xb5/0x5d0 [ 3053.609813] ? find_held_lock+0x2b/0x80 [ 3053.609830] ? get_pid_task+0xfd/0x250 [ 3053.609845] ? perf_trace_lock+0xb5/0x5d0 [ 3053.609861] ? avc_policy_seqno+0x9/0x20 [ 3053.609872] ? selinux_file_permission+0x99/0x600 [ 3053.609893] sg_write+0x86/0xe0 [ 3053.609905] vfs_write+0x2b7/0x1150 [ 3053.609919] ? __pfx_sg_write+0x10/0x10 [ 3053.609931] ? lock_acquire+0x15e/0x2f0 [ 3053.609944] ? __fget_files+0x34/0x3b0 [ 3053.609957] ? __pfx_vfs_write+0x10/0x10 [ 3053.609970] ? __fget_files+0x203/0x3b0 [ 3053.609981] ? lock_release+0xc8/0x290 [ 3053.609998] ? __fget_files+0x20d/0x3b0 [ 3053.610016] ksys_write+0x121/0x240 [ 3053.610029] ? __pfx_ksys_write+0x10/0x10 [ 3053.610047] do_syscall_64+0xbf/0x360 [ 3053.610062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3053.610075] RIP: 0033:0x7efff4616b19 [ 3053.610085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3053.610098] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3053.610110] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3053.610119] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3053.610127] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3053.610135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3053.610143] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3053.610161] [ 3053.646968] Invalid option length (1047482) for dns_resolver key 12:58:02 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x8cffffff00000000) 12:58:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000040)) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r0) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) [ 3053.669932] Invalid option length (1047482) for dns_resolver key 12:58:15 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f00000000c0)={0xffff7fff, 0x80000001, 0x0, 0x4, 0xbfa0, 0x2}) 12:58:15 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xd4}}, './file0\x00'}) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x6, 0x1, &(0x7f0000000240)=[{&(0x7f0000000180)="102d8d2360b72060bf49ad9b01b8c5de0fd8884360fa67853799e1d10b79b7c05dfafe24532e1eaa1697f5757c4c611a9ebe1a933865ca87c61db1fd62e43d42c1a029d99ecb47fd41cceca04eee0a13f356a0521aee7d309e973bc1ad374f88b2949fd1b9859f7e2b5d16d42268e5f1bf0bb013306304db0a5b6a1e10e8f2ec8ebd6e857288a651580f65a3b91b3d411f60d708ef06", 0x96, 0x3}], 0x800000, &(0x7f0000000280)={[{@nr_blocks={'nr_blocks', 0x3d, [0x33, 0x31, 0x38, 0x70, 0x65]}}, {@huge_always}], [{@hash}]}) 12:58:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 55) 12:58:15 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xf6ffffff00000000) 12:58:15 executing program 3: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x29, 0x8, 0x6, 0x2, 0x11, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, 0x7800, 0xa0, 0x8, 0x4}}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:58:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6, 0x45ea116a}}, './file0\x00'}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = dup2(r2, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000080)=0xffffffffffff0000) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) 12:58:15 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:58:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x41, 0x80138, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x1200, 0x100, 0x80000006, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffbffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 3066.887070] Invalid option length (1047482) for dns_resolver key 12:58:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xffffc90000000000) [ 3066.913931] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3066.913931] program syz-executor.1 not setting count and/or reply_len properly [ 3066.958155] Invalid option length (1047482) for dns_resolver key 12:58:16 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0400, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000001800)=ANY=[@ANYBLOB="74726104003d66642c7266646f6f3daec033d7d8a5f58af7c3f3bf901fa5020001c9261ff1c11b4bc9acc0b90cbf11f5a80f5011276b00590436e18866cfac61dd6a0c4e35913bb6a29cfbe6d8ee88e491287f0ecbae82164234dfb5999f4500000000000000998450f7bd32bf47fa8ac2b4dddda373578dadddc19f118a6709c4b096645b860e8640a1abd6ddec1dd506b0dde84b08ab33fb9b1780022967a0cd8c2a52", @ANYRESHEX=r1, @ANYBLOB="2c776642a00f3b00000100dd2107006e6f3d", @ANYRESHEX=r2, @ANYBLOB=',\x00']) fstat(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) chroot(&(0x7f00000017c0)='./file0\x00') mount$9p_tcp(&(0x7f00000014c0), &(0x7f0000001500)='./file0\x00', &(0x7f0000001540), 0x14810, &(0x7f0000001600)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@aname={'aname', 0x3d, 'debugfs\x00'}}, {@version_u}, {@debug={'debug', 0x3d, 0x1}}, {@privport}, {@noextend}], [{@measure}, {@uid_lt={'uid<', r3}}]}}) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001340)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0xfd91) mount(&(0x7f00000016c0)=@sg0, &(0x7f0000001700)='./file0\x00', &(0x7f0000001740)='dax\x00', 0x10000, &(0x7f0000001780)='\x00') sendmsg$unix(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000140)="dbb13b43ddfefd10c99d4fd9814db6a14e2eb06a38c5fc653aa7e1130859ba9252cd3f36a47a0290d57525d44afb093487824c74689b1f11d403ae35", 0x3c}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="586751da0236b8a0f629f9f9976bbcf681e263f3ea133e1ad94eb755c4710b7932ba8c0b28c03a5095b32ce228ae91e1f8b51d2e83842eb1c8cf7e3cf4acdc5cc22b9ea7ede0e19400ccc50c25b0a11a87177ca5594aa4812873bad79947e45f8d886f2f97ef441175f38c7e02d2c270ad5af0ead595073c6801dc3d2d1de107f4ec6df1da6c6c08b08cd359cb", 0x8d}, {&(0x7f0000001240)="70af3b7062e7fd53855f1d2072d174069f8792a6457b707a240a370eb0d2102d51dce6dae1a4bdf4b5a9fbd60e166c8842f522983e5ec59e61215392ed6b9542d7790ba500a24ad305174da098cff83737570534162da1abc07e7a5aab2c66fc99cbcb01766630164b34f24c65901393fa51126461b3a66ca1f5b074110f7d057b0f5a3e892cc979da19164e6df4216a03eea73796750fbf1a599d985ce335553ae4dd0dafca9394c18f78b6f3a5e159e8b4597a1aabd0e5", 0xb8}], 0x4, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [r1, r0, r4]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r5, r0, r0]}}], 0x48, 0x800}, 0x814) 12:58:16 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='nsfs\x00', 0x80000, 0x0) 12:58:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 56) 12:58:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0xffffffff00000000) 12:58:16 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = inotify_init1(0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = dup2(r3, r1) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000100)) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) [ 3067.216108] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; 12:58:16 executing program 2: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000140)={0x8, 0x7, 0x101, 0x7, 0x6, 0x3}) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder-control\x00', 0x800, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3da348420e807c9819d9a2b05f0829ac12ef23c47685508572e548834278ac4e0c77f8f66ed54a1004e3b8e92487b7cb932308ae97a21ead62c73d9132e87d4590d9e8d86ce3c531a41dd33dc21405f296e990bba1fddd5f08334d32197c1a8f50", @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x301, @broadcast}, 0x2, {0x2, 0x4e23, @remote}, 'macvlan0\x00'}) dup2(r5, r2) capset(&(0x7f0000000200)={0x19980330, r1}, &(0x7f0000000240)={0x0, 0x8, 0x9, 0x10000, 0x40, 0x80}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capset(&(0x7f0000000300)={0x19980330, r1}, &(0x7f0000000340)={0x20, 0xfff, 0x8000, 0xe0, 0x7, 0x819}) pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') [ 3067.216108] program syz-executor.1 not setting count and/or reply_len properly [ 3067.238698] 9pnet_fd: p9_fd_create_tcp (47599): problem connecting socket to 127.0.0.1 12:58:16 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000140)={0x20071026, r0}, &(0x7f0000000180)={0x7fffffff, 0x7, 0x4f, 0x5b, 0x80, 0xc5de}) 12:58:16 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 57) 12:58:16 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465800000003000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='zonefs\x00', 0x0, 0x0) mount_setattr(r0, &(0x7f0000000000)='./file0\x00', 0x1800, &(0x7f0000000140)={0x80002, 0x100072, 0x300000}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x389240, 0x54, 0x1}, 0x18) linkat(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0) [ 3067.486132] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3067.486132] program syz-executor.1 not setting count and/or reply_len properly 12:58:16 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() [ 3067.576535] cgroup: fork rejected by pids controller in /syz5 [ 3067.643273] Invalid option length (1047482) for dns_resolver key 12:58:27 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() 12:58:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) dup2(r2, r3) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="2c7c4f9e4c6024e7b9a85f6fae7fdc77265fe36f3d95e649df03a2336077bd79dddcb9cc4c8035d149ddc1d9a26830063f33d247f94284e224dcb3b4149d105cb8de7082249954bd42a5347edbf69004d9776426189bc50d76bbfc51510e83d9177db57df93ddd6def6c7047b84c030004355c999c4f0dcc4821aa209bdb2cf9d66f3bdfbf2f99200fa4a70eb4ae9a0a5496aef892db849d84", @ANYRESHEX=r5, @ANYBLOB=',\x00']) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) 12:58:27 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1100, &(0x7f0000000040)={0x100000, 0x3, 0x90000}, 0x20) 12:58:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 58) 12:58:27 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:58:27 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file1\x00', 0x3) utime(&(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)={0x400, 0x8}) 12:58:27 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x6, 0x49, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="ffff500000000001000ee3e8880afdfe2b662154107feb4f1a46b25af2db421fcea90585bf41e174f93cf9e97e2a33277f13547dc85915762a2d96d9e9923e"], &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x80042, 0x0) 12:58:27 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)={0x9cb, 0x40001}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x1f, 0x530c8013d6ee8459, 0x0, 0x814080, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x1000004, &(0x7f0000000200)='s?|Y\xe3\xf7\xbfHc\xe8l\x16\x00') [ 3078.755212] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3078.755212] program syz-executor.1 not setting count and/or reply_len properly [ 3078.761489] Invalid option length (1047482) for dns_resolver key [ 3078.762509] FAULT_INJECTION: forcing a failure. [ 3078.762509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3078.763605] CPU: 1 UID: 0 PID: 48133 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3078.763631] Tainted: [W]=WARN [ 3078.763635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3078.763643] Call Trace: [ 3078.763648] [ 3078.763653] dump_stack_lvl+0xfa/0x120 [ 3078.763683] should_fail_ex+0x4d7/0x5e0 [ 3078.763703] _copy_from_iter+0x1dc/0x1660 [ 3078.763721] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3078.763737] ? do_raw_spin_lock+0x123/0x260 [ 3078.763756] ? __pfx__copy_from_iter+0x10/0x10 [ 3078.763770] ? find_held_lock+0x2b/0x80 [ 3078.763789] ? __create_object+0x59/0x80 [ 3078.763809] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3078.763827] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3078.763841] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3078.763860] copy_page_from_iter+0xe3/0x180 [ 3078.763879] bio_copy_from_iter+0x108/0x270 [ 3078.763905] blk_rq_map_user_iov+0xc07/0x1180 [ 3078.763931] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3078.763953] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3078.763972] ? find_held_lock+0x2b/0x80 [ 3078.763990] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3078.764005] ? lock_release+0xc8/0x290 [ 3078.764018] ? import_ubuf+0x1be/0x220 [ 3078.764035] blk_rq_map_user_io+0x1cf/0x200 [ 3078.764056] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3078.764076] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3078.764098] ? irq_work_queue+0x9c/0x100 [ 3078.764116] ? __asan_memset+0x24/0x50 [ 3078.764133] sg_common_write.constprop.0+0xd75/0x1710 [ 3078.764153] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3078.764167] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3078.764184] ? ___ratelimit+0x465/0xa10 [ 3078.764206] sg_write.part.0+0x6a2/0xb50 [ 3078.764221] ? __pfx_sg_write.part.0+0x10/0x10 [ 3078.764236] ? perf_trace_lock+0xb5/0x5d0 [ 3078.764253] ? __pfx_perf_trace_lock+0x10/0x10 [ 3078.764271] ? lock_acquire+0x15e/0x2f0 [ 3078.764286] ? perf_trace_lock+0xb5/0x5d0 [ 3078.764300] ? find_held_lock+0x2b/0x80 [ 3078.764318] ? get_pid_task+0xfd/0x250 [ 3078.764333] ? perf_trace_lock+0xb5/0x5d0 [ 3078.764349] ? avc_policy_seqno+0x9/0x20 [ 3078.764361] ? selinux_file_permission+0x99/0x600 [ 3078.764382] sg_write+0x86/0xe0 [ 3078.764395] vfs_write+0x2b7/0x1150 [ 3078.764407] ? __pfx_sg_write+0x10/0x10 [ 3078.764419] ? lock_acquire+0x15e/0x2f0 [ 3078.764433] ? __fget_files+0x34/0x3b0 [ 3078.764446] ? __pfx_vfs_write+0x10/0x10 [ 3078.764459] ? __fget_files+0x203/0x3b0 [ 3078.764471] ? lock_release+0xc8/0x290 [ 3078.764488] ? __fget_files+0x20d/0x3b0 [ 3078.764507] ksys_write+0x121/0x240 [ 3078.764520] ? __pfx_ksys_write+0x10/0x10 [ 3078.764540] do_syscall_64+0xbf/0x360 [ 3078.764553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3078.764567] RIP: 0033:0x7efff4616b19 [ 3078.764577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3078.764589] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3078.764602] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3078.764611] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3078.764619] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3078.764626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3078.764633] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3078.764652] 12:58:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffc, 0x0, 0x0, 0x880001, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 3078.827316] 9pnet_virtio: no channels available for device /dev/md0 12:58:28 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 59) 12:58:28 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x1) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) 12:58:28 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:58:28 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x2) [ 3079.039460] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3079.039460] program syz-executor.1 not setting count and/or reply_len properly [ 3079.049392] FAULT_INJECTION: forcing a failure. [ 3079.049392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3079.051336] CPU: 0 UID: 0 PID: 48457 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3079.051373] Tainted: [W]=WARN [ 3079.051381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3079.051395] Call Trace: [ 3079.051403] [ 3079.051411] dump_stack_lvl+0xfa/0x120 [ 3079.051455] should_fail_ex+0x4d7/0x5e0 [ 3079.051489] _copy_from_iter+0x1dc/0x1660 [ 3079.051521] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3079.051549] ? do_raw_spin_lock+0x123/0x260 [ 3079.051582] ? __pfx__copy_from_iter+0x10/0x10 [ 3079.051607] ? find_held_lock+0x2b/0x80 [ 3079.051649] ? __create_object+0x59/0x80 [ 3079.051684] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3079.051716] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3079.051740] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3079.051776] copy_page_from_iter+0xe3/0x180 [ 3079.051809] bio_copy_from_iter+0x108/0x270 [ 3079.051854] blk_rq_map_user_iov+0xc07/0x1180 [ 3079.051900] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3079.051940] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3079.051974] ? find_held_lock+0x2b/0x80 [ 3079.052006] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3079.052030] ? lock_release+0xc8/0x290 [ 3079.052054] ? import_ubuf+0x1be/0x220 [ 3079.052083] blk_rq_map_user_io+0x1cf/0x200 [ 3079.052121] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3079.052156] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3079.052195] ? irq_work_queue+0x9c/0x100 [ 3079.052226] ? __asan_memset+0x24/0x50 [ 3079.052256] sg_common_write.constprop.0+0xd75/0x1710 [ 3079.052291] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3079.052316] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3079.052346] ? ___ratelimit+0x465/0xa10 [ 3079.052387] sg_write.part.0+0x6a2/0xb50 [ 3079.052412] ? __pfx_sg_write.part.0+0x10/0x10 [ 3079.052440] ? perf_trace_lock+0xb5/0x5d0 [ 3079.052471] ? __pfx_perf_trace_lock+0x10/0x10 [ 3079.052503] ? lock_acquire+0x15e/0x2f0 [ 3079.052530] ? perf_trace_lock+0xb5/0x5d0 [ 3079.052554] ? find_held_lock+0x2b/0x80 [ 3079.052586] ? get_pid_task+0xfd/0x250 [ 3079.052611] ? perf_trace_lock+0xb5/0x5d0 [ 3079.052641] ? avc_policy_seqno+0x9/0x20 [ 3079.052660] ? selinux_file_permission+0x99/0x600 [ 3079.052698] sg_write+0x86/0xe0 [ 3079.052721] vfs_write+0x2b7/0x1150 [ 3079.052743] ? __pfx_sg_write+0x10/0x10 [ 3079.052765] ? lock_acquire+0x15e/0x2f0 [ 3079.052789] ? __fget_files+0x34/0x3b0 [ 3079.052812] ? __pfx_vfs_write+0x10/0x10 [ 3079.052835] ? __fget_files+0x203/0x3b0 [ 3079.052857] ? lock_release+0xc8/0x290 [ 3079.052887] ? __fget_files+0x20d/0x3b0 [ 3079.052920] ksys_write+0x121/0x240 [ 3079.052944] ? __pfx_ksys_write+0x10/0x10 [ 3079.052979] do_syscall_64+0xbf/0x360 [ 3079.053003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3079.053027] RIP: 0033:0x7efff4616b19 [ 3079.053044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3079.053066] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3079.053088] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3079.053103] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3079.053118] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3079.053131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3079.053145] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3079.053178] 12:58:28 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) [ 3079.159522] Invalid option length (1047482) for dns_resolver key 12:58:28 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000006011240000207000015d5983e0914b76a3881110fc9f3e4f471ec06863a580aefd4cd6624e978e9a96dfa772f16b0c4be754c132c5a00b0687e2a45d814b3d62068e8573603e709d1298ed0e205bd2d93"], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x805) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup2(r3, r2) ioctl$SG_GET_TIMEOUT(r4, 0x2202, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x81}}, './file0\x00'}) ioctl$SG_SET_COMMAND_Q(r5, 0x2271, &(0x7f0000000300)) r6 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) copy_file_range(r6, &(0x7f0000000180)=0x6, r7, &(0x7f00000001c0)=0xd28, 0x7, 0x0) 12:58:37 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x1000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:58:37 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) faccessat2(r2, &(0x7f0000000040)='./file0\x00', 0x100, 0x100) 12:58:37 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) futimesat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0xea60}}) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:58:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='wfdno', 0xfffffffffffffffa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) io_submit(0x0, 0x2, &(0x7f0000001800)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000600)="d98362588a2eddd4a52cbfa6c1b71fa4852b55a7a252b8dd3eef136e3c3463f26ab3e486e422740e987c097ba621c0e3b6ff4264f6e6c923ddc22d9b5ce8e1d25b9a56d1d7c982cea67b407f85cc6eedb0ea7be65e2841db84e407795cf709b19a5de64cbfaad7d98700f22c2054e37f737ac687e8ba6c52a45fb2ac066d2f9a149f9678a16a49e7908a04b7be67e4f2a207f1fca3f9fdba1eab9acdce6781e84e73d19e41164e584da31cfadce404be821489f44d389560a8bc96533fa0284bdf5c5fd82d871fbec52145", 0xcb, 0x7, 0x0, 0x1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000, 0x75, 0x0, 0x2}]) clone3(&(0x7f0000000500)={0x20000800, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), {0x18}, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=""/43, &(0x7f00000004c0)=[r2], 0x1, {r4}}, 0x58) munlockall() munlockall() 12:58:37 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f6e756c6cb41501"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:58:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 60) 12:58:37 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) 12:58:37 executing program 5: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@dev, @empty, 0x0}, &(0x7f00000001c0)=0xc) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, r1}, 0x14) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)={0x0, 0xf, 0x6}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@local, 0x2e}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0x9, 0x3, 0x49, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7, 0x0, 0x4}}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20040180}, 0xc, &(0x7f0000000440)={&(0x7f0000001c80)={0x448, 0x0, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x218, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff81, 0x1, 0x8, 0x9}, {0x200, 0x85, 0x3f, 0x80000000}, {0x2, 0x38, 0x0, 0x5}, {0x6, 0x8, 0x8, 0x400}, {0x4, 0x1, 0x4, 0x6}, {0x7ff, 0x3, 0x20, 0x85}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r1}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffffff80}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff00}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r1}, {0xcc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x2, 0xf, 0x1, 0x3e}, {0x1, 0x3f, 0x7, 0x40}, {0x3, 0x8, 0x9, 0x5}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}]}, 0x448}, 0x1, 0x0, 0x0, 0x4044010}, 0x5592d189ec40471f) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000240)=0x1, 0x4) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/184, 0xb8}, {&(0x7f0000000580)=""/255, 0xff}, {&(0x7f0000000680)=""/168, 0xa8}], 0x3, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/253, 0xfd}], 0x4, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}], 0x2, 0x2001, &(0x7f0000001c00)={0x0, 0x3938700}) inotify_add_watch(r7, &(0x7f0000001c40)='./file0\x00', 0x102) [ 3088.432595] Invalid option length (1047482) for dns_resolver key 12:58:37 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="6972769ec825378666e5b05de5e9b1abc024833bdcc04336d9a534e7187012cd55dee1871cd41c72dda858475cbf4431836854ee01ee22692b429f58e009fbb19560556f41cb0f7e0562ec6514b82a61d1fd33c79fbe332be0dfbe21277bbd041232bd9c84f749084b4a033a", 0x6c, 0x8}, {&(0x7f0000000200)="a630667708f02605773306c024b5e2b4e2b5acd7a85d4c2d1311683e3984eee01b27c17936b98cdb568c45378a264de566d7ffa63eab34f4c97b460454a7b431a3ddac6e7447875cf8ee11e9b1b18a5e73b2a825795d4fed1abbc5bdf3d8fcaf05bc361914e11bc1c8452197adb3910554f535c414ce3380c8fd2f135e3e240d71374223cc855586e06c4a8370394aa2bf5f7923c2065fc49fa2f676f7fe776019ad22323adc66daeb8538cd36097de3871601e70f155a994849cd70031230fdfa8ea164e9c5aab3fbf2d9f287130c79626185b5ccf2906eddd9d394eab7d67c3dd10f236eb7137e16cd3ee1d2a34a4d1bf29192d214e58361bd4f4da5298d192102804eefdd054ccfecca24dd866f9203baabf80b64894e9e4941e9a8acbfe0b30e1bce2bb8db387c2e581a990c5f3000ead0c6fef6fb6d5050c83f210951800de6eb532407054a6bf3a8ddde3e39f23e789271e222c181c98423ace0c69c342d28c1e35864552bb3578d38ef896ad9f0d442551aac9c7ad8a3fbf9e5743fb48c29d89200fcd2566fa5220db85bac619aadc0b684e00d090997e58f75e48b6f3bcf981fd2a35482f56ab7ece6c29d5f4384ac758d19248da15ad19256b9b8fdda5a74bb956cca709b7c2d7e435882cc5cd650ad36312e548ad185183ffb0055439e71cccc72cdbf50800c3ffe5c2d74456308958a53687063ff7fe9a1f626852adc35c86b7849cc9bd1cf1ca3840b1435f61ef22b98354ca88e31fba745db5d94f1dc15234e04e22fa745f27f09022f227f1d9ad48ea5404c3459b9ec973f27d0be1efca7ddb41c94cb0dcd5153c6ed04052ff39f6e0a3f1f964f2c4eb306e022a4ef9a62082838b4cf444861c37b7ee9daff6941a491683c1c96c6bdde6a8600b14e790ea787f3061edb861f325aa58c8cd0163e35f19bd1b6a977b46c8d4f3e461c34fe0b3c06f71b819641ff43fe22e4f5117d21906e3ebb28aac5e271a21c7a9dc157a8dbecd3c2f27e45e7be0cf30f1f8889c8ec926dca908cbd6766f3039ffa1d338cb70fc0d454f652899dbfb4bdc233d32b376c6146f7033d75bd462167954271f12e53f69bcdb5f31fd9ae9c2bc444dec61291166841d32fd48105a2d75b08b8d54c303f8280b90fb4be3dbf19a7a807b3bce2bb023b30aa5585400031a28b51e70cbb0d8b162b5c36e45b196251f0118c6115dae419b3f7de6de8ef85531fd0a4bbd92ce9ba2cb2be45099bce9cfbfeeb57c682f5b9edf521a42e8d05a82b221cdc0e9794362fd31c0f6b70d1784d6f0a15d843cf5dfc8f70b3678c77dff51d437f5d8f7a9487b6ee5fcbc8d0b8fe57bf8c058a1bc7625ddd337027e3c74d76d24c44c6cbf4183330bc62775fcfb86df323b38fcebbd7f2849c4b36cba220855b1e5c3790d748e769c800a1c3557ffd4195c1a6a564c9dbdef9d88f4cdc94d727ae2dd71933ddc5dbd500cbcedc225c967fd0aec72d236fab1cb40810e659b0a836ad0e44e7852bb2a0dddcf385923ae72ad601c49bc0b40f0902db31e6741bd5720d62c742398dd8cacaa308c72ddfb95870bb8d74b82183bc0e384f2abd695a59fde7a901bc3702f3a3de0e777eb806f164685de562718d1cd9fb77e3c04903cd876ec8e839f6f751c6adaaa07db9c85c2943f04d23c71344df2a8ece202b2427a9a4519caf4f565eb86cbb6b7e6427829ff3dea6e23bbdce816fb76a1b077ff841d5cf632925d95c1d4b264d09f2073b88605c92b1f79eb6bd14c6d9de5ff5e62ad26b55db0a4c2a29d707e2e05577f7f012e1088bb574b90747bdf8548b39478ddc283ca5c81edd1bbc845e59b56796ece8ffc3f9c0377df27b688f34cb37835292a045730b2db810c3289870219d3ba4779ed0a5ec92a6a47cd610b81ef2f6eaab56bbed4a51cebebf9d64ba9f5241d4535acb80af4a1fec31384b391e0d0d4f0b884268d7fa31583afc9309847bec7065297d3190b807967a39173054043730e6e916f51730cbdbf3a220eb7306e58989aaf8938f7c3851f85036f164c5836ab45a1baa5aab6f5d417c7fdfad8c3a018ebd04948dbc3e4e3dc0db3c231f01ae89ae0b58a181c66a500cb269075f467b378ebc594aca07e923f3517025cf16d21d978c65ce0609278e8d1348e874cd2af93067e54cbdb4b6a0b7fc0024d5d4876aa669be79144081d800bb4f14183fd2a9a48a9a83fc8f04fe84d1d42c02ac5db7dd18f7297c9af4514a21fd27efeb13204e7838f8a879eedb66481ecc40f973354fe7b80eb5934767d2560df9b4b49d90101f96cc432a5d0b9c313ce24e7f18ed8637915b854beaba0e5ba7cf9ddebb1639acb114f4ae3a69205544b1bb28fab44daea8e33196e489ffcb52177fdb39f481a9ca042132a70cda163bc0e6134851cce3856b5946db5abf7d15abbd353ef729123c2e17baa7ad6c39e839078921aa8f7a3b96805f1d5cb53e93421483690b6e117ce6bd5bc1e134ccfc6cd4e6b44320c8b3509c90b593c3710a3882f85ac26bba537812e534b65dad3f6c0f1e717b96dfb73baa7621720c366128a674c8661089a47b4896af38431bc3ce0c5915a10dcdaf73df19da2b4c8dc3dc678b0cba498e0f95df3aaeba2a2880f20e19bd7e762a828523d151f6be479e95c3310c543dda9c2dc7bddb045f26e147404191c5cdb5e8b4a95ee7e269f6e7a4793a6818b07ff8c8d877c7534a4226df52ef705c5cadb8dfcc057263029177e1ec5f9f9985f29b3b89d512ba9ab7e9440d69868fb06ff41cd3dff2447195b68e02ba66a21d4c93d08b457813a6f89c23b90c41c73a91ea37606ff4a34075be642677ef4a27c00bf39e16da5674e593987a446a52226329acb1984f64021f4002515e705e3bb3572f88ee8805cab5d6d0bbecadb5dd1515ffe77027b0353c5bcba710ac2f7f2a6c7479f8b3e14e4859802955fd7771692a2642b2e6bcebac2222148890a45e6618797bc83cce7cbcb393f339a8a347af5c159f06c83bce7310f5c03812ede55b764039da7208f3be6b736a4b9bb3befc54b16d4995dbc0af3af98713ea354f6739e443ae5d6cb33e22e950d6f24530a7a97462cdc91174476a15ca6510bfd494a56159bbe1d9ab205db7db5f94ef813d0050ced13ce511a7b19df8aafa96af463b384731ea8e76ad77040e1aa8eddaaea8181c7500866f4ec73a0174237b73eca5dfe69bd915f98526798c202c3df9d0a43c8a82a0da22c6fc1273b339ebfced684adf58a52a7b3ee027159ab03c42c11fb17664484883df619306fae4d6c71a442cba8e1d93ea1e766255c8bb3ca9bac1edd496556820e28b6d0493606b89ed50e88104941a89e819f708c8cbb06c12b6b40a315c003f87f5358b4efc135e9a286ffbd4bc26e90de0201332b3a9cc9d9621b75a4c7f3e54e711e833b1ac3c62789d471d82d8f7837d47539cb4f803ffdb18fe1dd9aafa771b8a755d903cd4403d88af1187f33af53a782f88e386ea571ac932aab19f204ab621e9e7b4d2c91e6ac80da9d59c0bf2eff1df8970c74c98fbe5972e1354845e51f13f7732586dd2768190e3c94ac9952d1a2a72d17f292ccc72e459fedba7706713d82cbab12f940c2e119d3d3a910c0b0a7cfa43e95af0093c2ad19d16bf31cce2e27b3ccd89d592aaf7ee77ef4020031aa048c11f68b252a49caf325e09a8829cd94513e2fcb4ae5f04aeedca4db37a05b26ee583cfb29a0280d069963acaea6b5678270764c4413fa2933627b51558b0223903da29739a0fdf2384f26344d98730c06132d43911101a6a3b9bc798d41166e5aa22166788bb502dd96e851aa592cfe340135e1b7957e13beb5667ad0b0fc41d00d7eb3156dd8f784d55674beafbb04275c9e2609853a3a5b2a45e8cbe206c859a72ce1ecfd812a384954b46ec7604cabfbf2e867d3f93f59ac793a748a1c732bc63001646d94e59f53d9233abf87f3a32a514cf8d252dc532aafb052842736d1b3cef30e5daff4d824ee242aa03b57791f2309529516d155f14c33736dbfd8a69167b31eeae20f775e63d085a058fc3c4350b0e92383f75c52be330210fbd06820cb3a1f038e2a48810914ac6eeb8eb59e27037fd7a5a25fae4d41af1ff0506b569c88475b7a3ebdbba0716a85eaa0710cbf46d9f559efdb76e11daa62f4febfc0bed9527e5a76fd35c7d5206d8a4c7513310664f0abfe44763569f11ae5b9a94ac2515d083883e3b2bdd5ce3965dc0315f7213a051b14c9e3663476bfe2d64eb426779824faeef24f1f8459ea6541e31d7d547bc17f5947c7c18c98e3f12b9c2c2be0a9e7b5c6d9f943faf31bdff586e91a33e9ef5ebd54d2f33cdacdb8063c11cfd2e98c0cfde6553f4b226112a283fe55a59f9f283d4ea8e41d1348a8d253ede8b2b7bc07f816ae4721528755230e3d6e8f2b27f91e9423e7c6b2284776043ee61d78177913d506c9b4b44fa3b78b7b2a1bfcf01d61fdf1a1c9c5443e8fbd5b4d37a74274bf83cba15a1fdd37b42d33e3f5b2e6da61bda1cdb0a3149a76c26797e47123b04d15bc0179476807463cef9bf9cf52b94953a2110f858b8478a4b20e6aa68d0da297b812d400a682782a2f97066547216bf65f040350d06d0619a5ad30d237f74353f017b3cce9cbe8f96bf7c788a9cbaea8aec89cd56058bfe40483f5e020c44cf020296be5b5d2353cc20dd386180b748c307424abff6dbff305ac2fa1b2e6d382bb47b1dc85d1df62da47d95823b668282c3dfb2d39396c49b0e032a320b96086a36d42d4839544ce56d64086a0fb51a49fd8cbbb7f0a70f93e4ec2fcc00d88627d5722863a2bfa90557bdeefdae3dc4e74c71c48db76757b5a6e2869ace4f586ec15dc7a009bb7aee064afccbe23cab0d00f14b7cfa5de5584f702e094f651b021824350fc00d6ca13287107f51b1c9fc3ff039a33486f770829ab0d5d7cf1ca5cb6bd7e610a4a16cbb58e324c3f6d50d509c1f40106edcec6b7de61ef85df27a6c07e994b80de02c8fc87362c27d2ba450db226b1e87bb9a8455a35e310c8d46083f90a6fbcddd3250af8f68c2f18c3358a1a86cb6f8b8fff136adbceabff273a16326e11db70c5fa26e624bcc7a0c6f8ffce71cf5c10838941dffe5302b8a737b097d5827b1c89c7055c041289f12858300626d5bf3170fa4780284c77c55af89adbe78b64816a037228b25b7d625b65aa21e03e30581c5038556aecc8ca217dcfe98d5b7e0a63c0f00db781ea23ae6af9392512d2ff9587931c5bd4b63a7907f151ac1cf2a41bb414223ad9b39a7597f8347ba8720505a02090888118f0135988a3433dead3ea9114169b2abf7af37c267c01acf0c7a553f36cc0a70bc338f22f299f2bc52421b2bc6ac54c413380e557738323c243359aad6daae6693d8ecbce452a2e08255b45a204acef2c747ae56009749ed8518fe18fb186042eb6c0e6099ac1094399ab170588a20d2a924e3b4d7702cb17e526632b092e2c001ba0debcbcb83da8458c8b40ca79c9f1bb677fd486082e425f110dbce57cc86f7a1141b415bc090aebf38eddcd9833b10405cf2d36cb453b6787063313dba93f002da31786a7c20d9332542980892144f0f66f78fd12b6b7c7bb5403a32e70f270c71bbdddccca57a1467bc819cd47266ada51c3bcd0a68debe25a8710e248622617ccca7e7e97a3026a818f007b7c5d6774da75c18ec9b3562e48c97dc3702036670948a07c9d549fa809f3c01af471bc933816e6f9450a1ab928c5acffcb9df1650328b86f840a9c566e1bb562b5f2f9018", 0x1000, 0x20000000}, {&(0x7f0000001200)="219e0f6d121a2de6a8ed8ef1d456fb1fdc5718f8bdab80d9bc7f7125052f5776837ec52391ea9d6b293992abe12ea5125460eca60ae90d37ea0a951fdc1d576bd9a92c62bfb68dee5b4fc15842c06b361abd132afab6c3ae12b948aeb16e9b98c4422d84e2c018b4896b60151bdfc67d09349f6091d61894603d2912c743427d38be9fc28a7074e8f8dd3419eb0a007c5a8622ac90711e4a37bfbd8ab8dfbf066451c8163652dab384527f7ff5473396c6fbacd8bb1eeaabcbeffcf6292e6f9fd44368ed534c3f32d0cc417272e56810fada3dea150427db35f9cfa174b265f94d12eeac49499c2f3ebe925dedd4af086b35603995", 0xf5, 0x7cf}, {&(0x7f0000001300)="4368bb616529a31128663467810419b8bda0194d463079da48b6b468e4310a230690988aa81baf4473960fc18c51ccdcab3a97b6d3780823d0a84d6deb56b8085478e838d862ef3cb0176c604a79fc68265da0f0dbb8bf4dd6dbe067bf703dd8cb79052a218b9362d4424b53fa1f09f9bb6b6d671038b931446608bdc648cb71a93e0befad4b5da29c6fe495f2c7d4eadf1d547417c0d3d0f7cc1ecf45f4ba62cd03522836c7d1cddedbe67ef57794b842417492240809bf8f073acbefe22785ee2ab6fe860a348867cca4222239c23601b42353cee4e31d6b9d4c48f7b2ad174f1f21e7aea5f3e0f381", 0xea}, {&(0x7f0000001400)="c093c88417a6981c7cb7055ee2d48e8d96dd053cbb63c13e40391cb977a1093e32af0c85bbfec39c974b0d9bf6efc0a47fbedbba81a31effafe9836d0bd24dab62bd2a891ed9c338bb5419ab9bd9651aad0706048f1c105113d4cd110f34b4a87951b55777c3d9ef5f389985f28ac56c0d02f5e6a6f6c46ad23b166c5db52291fee8cc0b6d1f53b470592a777f7c3a3091f9fbd5245a7ef8b39ff5edddc6092ab2f99758948ca6050472101f3fc48849b633cd", 0xb3, 0x2}], 0x10c00, &(0x7f0000001540)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@grpid}, {@jqfmt_vfsv1}, {@sb={'sb', 0x3d, 0x8}}, {@grpquota}, {@nobarrier}, {@data_ordered}, {@discard}, {@orlov}], [{@dont_measure}, {@smackfstransmute}]}) [ 3088.445429] Invalid option length (1047482) for dns_resolver key [ 3088.451779] mac80211_hwsim hwsim14 wlan1: entered promiscuous mode [ 3088.464340] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3088.464340] program syz-executor.1 not setting count and/or reply_len properly [ 3088.473425] mac80211_hwsim hwsim14 wlan1: left promiscuous mode [ 3088.475507] FAULT_INJECTION: forcing a failure. [ 3088.475507] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.477364] CPU: 0 UID: 0 PID: 48961 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3088.477406] Tainted: [W]=WARN [ 3088.477415] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3088.477430] Call Trace: [ 3088.477439] [ 3088.477449] dump_stack_lvl+0xfa/0x120 [ 3088.477496] should_fail_ex+0x4d7/0x5e0 [ 3088.477533] should_failslab+0xc2/0x120 [ 3088.477565] __kmalloc_noprof+0xc8/0x6e0 [ 3088.477601] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3088.477646] ? bio_copy_from_iter+0x192/0x270 [ 3088.477684] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3088.477730] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3088.477767] blk_rq_map_user_iov+0x1fd/0x1180 [ 3088.477819] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3088.477864] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3088.477902] ? find_held_lock+0x2b/0x80 [ 3088.477938] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3088.477966] ? lock_release+0xc8/0x290 [ 3088.477991] ? import_ubuf+0x1be/0x220 [ 3088.478026] blk_rq_map_user_io+0x1cf/0x200 [ 3088.478068] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3088.478107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3088.478151] ? irq_work_queue+0x9c/0x100 [ 3088.478186] ? __asan_memset+0x24/0x50 [ 3088.478217] sg_common_write.constprop.0+0xd75/0x1710 [ 3088.478256] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3088.478284] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3088.478318] ? ___ratelimit+0x465/0xa10 [ 3088.478363] sg_write.part.0+0x6a2/0xb50 [ 3088.478391] ? __pfx_sg_write.part.0+0x10/0x10 [ 3088.478422] ? perf_trace_lock+0xb5/0x5d0 [ 3088.478458] ? __pfx_perf_trace_lock+0x10/0x10 [ 3088.478490] ? lock_acquire+0x15e/0x2f0 [ 3088.478517] ? perf_trace_lock+0xb5/0x5d0 [ 3088.478541] ? find_held_lock+0x2b/0x80 [ 3088.478573] ? get_pid_task+0xfd/0x250 [ 3088.478599] ? perf_trace_lock+0xb5/0x5d0 [ 3088.478629] ? avc_policy_seqno+0x9/0x20 [ 3088.478649] ? selinux_file_permission+0x99/0x600 [ 3088.478686] sg_write+0x86/0xe0 [ 3088.478708] vfs_write+0x2b7/0x1150 [ 3088.478732] ? __pfx_sg_write+0x10/0x10 [ 3088.478754] ? lock_acquire+0x15e/0x2f0 [ 3088.478778] ? __fget_files+0x34/0x3b0 [ 3088.478800] ? __pfx_vfs_write+0x10/0x10 [ 3088.478823] ? __fget_files+0x203/0x3b0 [ 3088.478845] ? lock_release+0xc8/0x290 [ 3088.478875] ? __fget_files+0x20d/0x3b0 [ 3088.478908] ksys_write+0x121/0x240 [ 3088.478946] ? __pfx_ksys_write+0x10/0x10 [ 3088.478981] do_syscall_64+0xbf/0x360 [ 3088.479005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3088.479028] RIP: 0033:0x7efff4616b19 [ 3088.479045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3088.479067] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3088.479090] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3088.479105] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3088.479119] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3088.479132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3088.479146] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3088.479178] 12:58:37 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f00000000c0)={0x758, 0x261, 0x4, 0x0, 0x8, 0x6}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) 12:58:37 executing program 3: openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101840, 0xc) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x880001, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000200)={@id={0x2, 0x0, @a}}) chown(&(0x7f0000000000)='./file0\x00', 0xee00, r0) 12:58:37 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f2000000000802000623000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:58:37 executing program 5: r0 = accept$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) listen(r0, 0x5) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x5, 0x5, 0x0, 0xff, 0x7, 0x9}) 12:58:48 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0xffffffff7fffffff, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) uname(&(0x7f00000004c0)=""/167) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:58:48 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed9404, 0x0) 12:58:48 executing program 0: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xff, 0xa000, 0x9, 0x26a, 0x9b83}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:58:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 61) 12:58:48 executing program 2: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f00000000c0)={0x5, 0x3, 0x7, 0x4, 0x205, 0x800}) 12:58:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) 12:58:48 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x9, 0x200, 0x8000, 0x0, 0x2, 0x1}) 12:58:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f00000000c0)=r3) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000100)={0x6, 0x7f, 0x0, 0x200, 0x4, [{0x3, 0x0, 0xffff, '\x00', 0x2000}, {0x3ff, 0x9, 0xffff, '\x00', 0x83}, {0xffffffffffffffff, 0x939b, 0x0, '\x00', 0x1885}, {0x1, 0x996, 0x4, '\x00', 0x200}]}) 12:58:48 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') request_key(&(0x7f00000003c0)='rxrpc\x00', &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)='wfdno', 0xfffffffffffffffa) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) io_submit(0x0, 0x2, &(0x7f0000001800)=[&(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffff, &(0x7f0000000600)="d98362588a2eddd4a52cbfa6c1b71fa4852b55a7a252b8dd3eef136e3c3463f26ab3e486e422740e987c097ba621c0e3b6ff4264f6e6c923ddc22d9b5ce8e1d25b9a56d1d7c982cea67b407f85cc6eedb0ea7be65e2841db84e407795cf709b19a5de64cbfaad7d98700f22c2054e37f737ac687e8ba6c52a45fb2ac066d2f9a149f9678a16a49e7908a04b7be67e4f2a207f1fca3f9fdba1eab9acdce6781e84e73d19e41164e584da31cfadce404be821489f44d389560a8bc96533fa0284bdf5c5fd82d871fbec52145", 0xcb, 0x7, 0x0, 0x1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x6, 0x2, 0xffffffffffffffff, &(0x7f0000000780)="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", 0x1000, 0x75, 0x0, 0x2}]) clone3(&(0x7f0000000500)={0x20000800, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000300), {0x18}, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=""/43, &(0x7f00000004c0)=[r2], 0x1, {r4}}, 0x58) munlockall() munlockall() [ 3099.039767] Invalid option length (1047482) for dns_resolver key [ 3099.110538] Invalid option length (1047482) for dns_resolver key [ 3099.156094] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3099.156094] program syz-executor.1 not setting count and/or reply_len properly [ 3099.187693] Invalid option length (1047482) for dns_resolver key 12:58:48 executing program 3: ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0xc06c8000, 0x0) 12:58:48 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000280)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v1={0x2, "24a1d47e"}, 0x5, 0x3) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x1, 0xd, 0x9, 0x9b, "b7201a3d5c4078a08b6a37e3eafadb18f04745cb68af4f2e2082bd39c69cbaf2eba8467a6c04117c4e5bc7a7dda1e05aa1b5ed3b1bb3cfaab8af03ccf0a9577572cc21ad5091d749d892aad5fa3b7c62651829180431d8164c583baa9547eccef6f5624d436ff216a0b872246ae661b0e0a5a5207e598f076aa6d5393095c62354ecad4d7b8c571eb140ad399835a77186eb6c0ae0516e61558301"}, 0xa4, 0x2) 12:58:48 executing program 0: pwrite64(0xffffffffffffffff, &(0x7f0000000140)="250723ba14f0040a021ea5cda7ece40a58fe4256af420315e9d309abf8074f7e6f78459c6479256ff31b259e0dae4de74ede2b6a82b53708b64f5fc32beb1eb4385dce98eaed7f302e16652551b92e98b14052e39b117862edffbf38cd3ae87ebe505b5dc3346ba6b10f50973517175aee63802dc5fe789548eda319fe3134b25ace603d271f59d100a53340d5c4077f9a8427205fcdc071878457b42b76df6f2c9d8d0d6e3840116919b756d813fcc1b748c5cb12b1ac3488a2f51668aa24ff19ea", 0xc2, 0x7f) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766646e6f3d17fa7b5927b4c421fe3fd671233ada8d0e8d40638533d0a48106dedbed8d8b0cc03d07aad176119f3cd98e7118668fdc74ad0fb634c23232122bd2fb457fac0f8ffacdea96ea9ef6", @ANYRESHEX=r1, @ANYBLOB=',\x00']) recvfrom(r1, &(0x7f0000000040), 0x0, 0x10000, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000003c0)) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="31523ac14170d614703000"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:58:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 62) 12:58:48 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) 12:58:48 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f00000004c0)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xbc, r1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x8}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, r2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:58:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x405, 0x200000) dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000040), 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766646e6f3d44a0eb4f7780e68324a4c2d163bace505965edc3ca37b17bcd78a7ba5535d6256543b5e69a63f0028d9f30cf99359f4d859828fb29646a", @ANYRESHEX=r2, @ANYBLOB="2cd98663616368652c006554a71586a1e7bd3d17a97806"]) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r7, r6, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r10, r9, 0x0) bind$bt_l2cap(r3, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x41, 0x1}, 0xe) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x400, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [{@fsname={'fsname', 0x3d, '@%(%,'}}, {@subj_user={'subj_user', 0x3d, 'fd/3\x00'}}, {@fowner_lt={'fowner<', r6}}, {@hash}, {@subj_user={'subj_user', 0x3d, '/dev/ptmx\x00'}}, {@uid_eq={'uid', 0x3d, r9}}]}}) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r11}}) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) [ 3099.347125] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3099.347125] program syz-executor.1 not setting count and/or reply_len properly [ 3099.363031] FAULT_INJECTION: forcing a failure. [ 3099.363031] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.364116] CPU: 1 UID: 0 PID: 49470 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3099.364137] Tainted: [W]=WARN [ 3099.364142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3099.364149] Call Trace: [ 3099.364154] [ 3099.364159] dump_stack_lvl+0xfa/0x120 [ 3099.364191] should_fail_ex+0x4d7/0x5e0 [ 3099.364209] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3099.364229] should_failslab+0xc2/0x120 [ 3099.364246] __kmalloc_noprof+0xc8/0x6e0 [ 3099.364266] ? trace_kmalloc+0x1f/0xb0 [ 3099.364281] ? __kmalloc_noprof+0x29d/0x6e0 [ 3099.364298] ? bio_kmalloc+0x3e/0x70 [ 3099.364314] ? bio_copy_from_iter+0x192/0x270 [ 3099.364338] ? bio_kmalloc+0x3e/0x70 [ 3099.364352] bio_kmalloc+0x3e/0x70 [ 3099.364367] blk_rq_map_user_iov+0x390/0x1180 [ 3099.364393] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3099.364414] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3099.364435] ? find_held_lock+0x2b/0x80 [ 3099.364455] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3099.364469] ? lock_release+0xc8/0x290 [ 3099.364482] ? import_ubuf+0x1be/0x220 [ 3099.364500] blk_rq_map_user_io+0x1cf/0x200 [ 3099.364522] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3099.364541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3099.364565] ? irq_work_queue+0x9c/0x100 [ 3099.364584] ? __asan_memset+0x24/0x50 [ 3099.364599] sg_common_write.constprop.0+0xd75/0x1710 [ 3099.364622] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3099.364635] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3099.364653] ? ___ratelimit+0x465/0xa10 [ 3099.364676] sg_write.part.0+0x6a2/0xb50 [ 3099.364690] ? __pfx_sg_write.part.0+0x10/0x10 [ 3099.364705] ? perf_trace_lock+0xb5/0x5d0 [ 3099.364722] ? __pfx_perf_trace_lock+0x10/0x10 [ 3099.364739] ? lock_acquire+0x15e/0x2f0 [ 3099.364754] ? perf_trace_lock+0xb5/0x5d0 [ 3099.364768] ? find_held_lock+0x2b/0x80 [ 3099.364785] ? get_pid_task+0xfd/0x250 [ 3099.364800] ? perf_trace_lock+0xb5/0x5d0 [ 3099.364816] ? avc_policy_seqno+0x9/0x20 [ 3099.364828] ? selinux_file_permission+0x99/0x600 [ 3099.364849] sg_write+0x86/0xe0 [ 3099.364861] vfs_write+0x2b7/0x1150 [ 3099.364875] ? __pfx_sg_write+0x10/0x10 [ 3099.364887] ? lock_acquire+0x15e/0x2f0 [ 3099.364900] ? __fget_files+0x34/0x3b0 [ 3099.364914] ? __pfx_vfs_write+0x10/0x10 [ 3099.364927] ? __fget_files+0x203/0x3b0 [ 3099.364938] ? lock_release+0xc8/0x290 [ 3099.364954] ? __fget_files+0x20d/0x3b0 [ 3099.364973] ksys_write+0x121/0x240 [ 3099.364986] ? __pfx_ksys_write+0x10/0x10 [ 3099.365004] do_syscall_64+0xbf/0x360 [ 3099.365018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3099.365032] RIP: 0033:0x7efff4616b19 [ 3099.365041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3099.365055] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3099.365068] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3099.365077] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3099.365084] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3099.365092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.365100] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3099.365118] [ 3099.374750] 9pnet_fd: Insufficient options for proto=fd 12:58:48 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="6972769ec825378666e5b05de5e9b1abc024833bdcc04336d9a534e7187012cd55dee1871cd41c72dda858475cbf4431836854ee01ee22692b429f58e009fbb19560556f41cb0f7e0562ec6514b82a61d1fd33c79fbe332be0dfbe21277bbd041232bd9c84f749084b4a033a", 0x6c, 0x8}, {&(0x7f0000000200)="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", 0x1000, 0x20000000}, {&(0x7f0000001200)="219e0f6d121a2de6a8ed8ef1d456fb1fdc5718f8bdab80d9bc7f7125052f5776837ec52391ea9d6b293992abe12ea5125460eca60ae90d37ea0a951fdc1d576bd9a92c62bfb68dee5b4fc15842c06b361abd132afab6c3ae12b948aeb16e9b98c4422d84e2c018b4896b60151bdfc67d09349f6091d61894603d2912c743427d38be9fc28a7074e8f8dd3419eb0a007c5a8622ac90711e4a37bfbd8ab8dfbf066451c8163652dab384527f7ff5473396c6fbacd8bb1eeaabcbeffcf6292e6f9fd44368ed534c3f32d0cc417272e56810fada3dea150427db35f9cfa174b265f94d12eeac49499c2f3ebe925dedd4af086b35603995", 0xf5, 0x7cf}, {&(0x7f0000001300)="4368bb616529a31128663467810419b8bda0194d463079da48b6b468e4310a230690988aa81baf4473960fc18c51ccdcab3a97b6d3780823d0a84d6deb56b8085478e838d862ef3cb0176c604a79fc68265da0f0dbb8bf4dd6dbe067bf703dd8cb79052a218b9362d4424b53fa1f09f9bb6b6d671038b931446608bdc648cb71a93e0befad4b5da29c6fe495f2c7d4eadf1d547417c0d3d0f7cc1ecf45f4ba62cd03522836c7d1cddedbe67ef57794b842417492240809bf8f073acbefe22785ee2ab6fe860a348867cca4222239c23601b42353cee4e31d6b9d4c48f7b2ad174f1f21e7aea5f3e0f381", 0xea}, {&(0x7f0000001400)="c093c88417a6981c7cb7055ee2d48e8d96dd053cbb63c13e40391cb977a1093e32af0c85bbfec39c974b0d9bf6efc0a47fbedbba81a31effafe9836d0bd24dab62bd2a891ed9c338bb5419ab9bd9651aad0706048f1c105113d4cd110f34b4a87951b55777c3d9ef5f389985f28ac56c0d02f5e6a6f6c46ad23b166c5db52291fee8cc0b6d1f53b470592a777f7c3a3091f9fbd5245a7ef8b39ff5edddc6092ab2f99758948ca6050472101f3fc48849b633cd", 0xb3, 0x2}], 0x10c00, &(0x7f0000001540)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@grpid}, {@jqfmt_vfsv1}, {@sb={'sb', 0x3d, 0x8}}, {@grpquota}, {@nobarrier}, {@data_ordered}, {@discard}, {@orlov}], [{@dont_measure}, {@smackfstransmute}]}) [ 3099.445606] Invalid option length (1047482) for dns_resolver key 12:58:48 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x8800, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="0cfbffffff000000000a54e9798d282cee27b0f83d88ed05000000e800000000000000"], &(0x7f0000000140), 0x1c00) [ 3099.481592] 9pnet_fd: Insufficient options for proto=fd 12:58:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 63) [ 3099.520993] loop2: detected capacity change from 0 to 264192 [ 3099.555240] EXT4-fs: Ignoring removed orlov option [ 3099.561987] EXT4-fs: Ignoring removed orlov option [ 3099.562399] ext2: Unknown parameter 'dont_measure' 12:58:48 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="2f6465762f6c6f6f7030ed70545339903872a62c0358e78ca5404d7a0b6d928e899385ee2e56967366b8246c9c974295fa70b921987839d13618d7d8c64e9b2945ac38ad206a40f08344d9a95594de2b457fc8a5d3311ef99c96733dda79941f9fc0f34a110820fbfcb847ce6d0af8713610d9fc7e7533fd0145bab679c4a3bd2ea7c58427540f2e153404000000000000008a71f6688704f6ff6cfe3fce87c7658a49383dbbdf1355fda7133f29eeb67b"], &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='vxfs\x00', 0x1010004, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x804caa, &(0x7f0000000380)={'trans=unix,', {[{@msize={'msize', 0x3d, 0x4}}, {@uname={'uname', 0x3d, 'debugfs\x00'}}, {@dfltuid={'dfltuid', 0x3d, r1}}, {@access_user}, {@access_any}, {@privport}, {@access_client}, {@debug={'debug', 0x3d, 0x8}}, {@msize={'msize', 0x3d, 0x7}}], [{@dont_appraise}, {@appraise}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}}) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x204000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 3099.639526] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3099.639526] program syz-executor.1 not setting count and/or reply_len properly 12:58:59 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0) 12:58:59 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x9, 0x20, 0x5f, 0x80000001, 0x18, 0xfff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="c9174601010000ffff7f66b1ddc63cfc75f602cb1262574bf075d5e2596128f62b70505efe303263c1b2ff7fcc3bbec04ab9e4be59077a10a4e79ec6ffbbb4eedb65c0bfac91a8656e5aa73681ed0a0193749a2cfa7dc271ff8cfd7a6f798bcf668a570bb2d81607bb3eabc6b84bd0d8e8b93a1a1df32a7a11d3b871a861257866360211fb58a33bc0c7f2a1085cb6df618df5b314dee0f65c1d419527e04cfcb959b809701337ca3284c1724531ead76b87f967ea", @ANYRESHEX=r2, @ANYBLOB=',\x00']) r3 = socket(0x2a, 0x800, 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000010000003afc4aa62af747d538787cb056180000008089f75449ced32c4be3a6c3c05d", @ANYRES32=r3, @ANYBLOB="80000000000000002e2f66696c653000"]) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x20, 0x81, 0x80, 0x80, 0x0, 0xc887, 0x14001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0xffffffff, 0x401}, 0x9110, 0x9, 0x81, 0x1, 0x3, 0x7fff, 0x4, 0x0, 0x2, 0x0, 0x4}, 0xffffffffffffffff, 0x10, r0, 0x9) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fchown(r1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x1206010, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_none}, {@loose}, {@dfltuid}], [{@appraise}, {@uid_gt}, {@smackfsroot={'smackfsroot', 0x3d, 'y'}}, {@uid_lt={'uid<', r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, '#-'}}]}}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 12:58:59 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x6, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:58:59 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:58:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) r3 = syz_open_pts(r0, 0x400) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000080)={0x1, 0x8000, 0x800, 0x10001, 0x0, "45eb7f4753e963f4ac6db43eca9af107a81ee3", 0x6, 0x57}) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f00000000c0)) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:58:59 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) 12:58:59 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="6972769ec825378666e5b05de5e9b1abc024833bdcc04336d9a534e7187012cd55dee1871cd41c72dda858475cbf4431836854ee01ee22692b429f58e009fbb19560556f41cb0f7e0562ec6514b82a61d1fd33c79fbe332be0dfbe21277bbd041232bd9c84f749084b4a033a", 0x6c, 0x8}, {&(0x7f0000000200)="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", 0x1000, 0x20000000}, {&(0x7f0000001200)="219e0f6d121a2de6a8ed8ef1d456fb1fdc5718f8bdab80d9bc7f7125052f5776837ec52391ea9d6b293992abe12ea5125460eca60ae90d37ea0a951fdc1d576bd9a92c62bfb68dee5b4fc15842c06b361abd132afab6c3ae12b948aeb16e9b98c4422d84e2c018b4896b60151bdfc67d09349f6091d61894603d2912c743427d38be9fc28a7074e8f8dd3419eb0a007c5a8622ac90711e4a37bfbd8ab8dfbf066451c8163652dab384527f7ff5473396c6fbacd8bb1eeaabcbeffcf6292e6f9fd44368ed534c3f32d0cc417272e56810fada3dea150427db35f9cfa174b265f94d12eeac49499c2f3ebe925dedd4af086b35603995", 0xf5, 0x7cf}, {&(0x7f0000001300)="4368bb616529a31128663467810419b8bda0194d463079da48b6b468e4310a230690988aa81baf4473960fc18c51ccdcab3a97b6d3780823d0a84d6deb56b8085478e838d862ef3cb0176c604a79fc68265da0f0dbb8bf4dd6dbe067bf703dd8cb79052a218b9362d4424b53fa1f09f9bb6b6d671038b931446608bdc648cb71a93e0befad4b5da29c6fe495f2c7d4eadf1d547417c0d3d0f7cc1ecf45f4ba62cd03522836c7d1cddedbe67ef57794b842417492240809bf8f073acbefe22785ee2ab6fe860a348867cca4222239c23601b42353cee4e31d6b9d4c48f7b2ad174f1f21e7aea5f3e0f381", 0xea}, {&(0x7f0000001400)="c093c88417a6981c7cb7055ee2d48e8d96dd053cbb63c13e40391cb977a1093e32af0c85bbfec39c974b0d9bf6efc0a47fbedbba81a31effafe9836d0bd24dab62bd2a891ed9c338bb5419ab9bd9651aad0706048f1c105113d4cd110f34b4a87951b55777c3d9ef5f389985f28ac56c0d02f5e6a6f6c46ad23b166c5db52291fee8cc0b6d1f53b470592a777f7c3a3091f9fbd5245a7ef8b39ff5edddc6092ab2f99758948ca6050472101f3fc48849b633cd", 0xb3, 0x2}], 0x10c00, &(0x7f0000001540)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@grpid}, {@jqfmt_vfsv1}, {@sb={'sb', 0x3d, 0x8}}, {@grpquota}, {@nobarrier}, {@data_ordered}, {@discard}, {@orlov}], [{@dont_measure}, {@smackfstransmute}]}) 12:58:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 64) [ 3110.828419] Invalid option length (1047482) for dns_resolver key [ 3110.838353] loop2: detected capacity change from 0 to 264192 [ 3110.842552] EXT4-fs: Ignoring removed orlov option [ 3110.844326] EXT4-fs: Ignoring removed orlov option [ 3110.844732] ext2: Unknown parameter 'dont_measure' [ 3110.874187] Invalid option length (1047482) for dns_resolver key 12:59:00 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) r5 = add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r5, 0x1) [ 3110.901382] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3110.901382] program syz-executor.1 not setting count and/or reply_len properly 12:59:00 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x5, &(0x7f00000014c0)=[{&(0x7f0000000180)="6972769ec825378666e5b05de5e9b1abc024833bdcc04336d9a534e7187012cd55dee1871cd41c72dda858475cbf4431836854ee01ee22692b429f58e009fbb19560556f41cb0f7e0562ec6514b82a61d1fd33c79fbe332be0dfbe21277bbd041232bd9c84f749084b4a033a", 0x6c, 0x8}, {&(0x7f0000000200)="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", 0x1000, 0x20000000}, {&(0x7f0000001200)="219e0f6d121a2de6a8ed8ef1d456fb1fdc5718f8bdab80d9bc7f7125052f5776837ec52391ea9d6b293992abe12ea5125460eca60ae90d37ea0a951fdc1d576bd9a92c62bfb68dee5b4fc15842c06b361abd132afab6c3ae12b948aeb16e9b98c4422d84e2c018b4896b60151bdfc67d09349f6091d61894603d2912c743427d38be9fc28a7074e8f8dd3419eb0a007c5a8622ac90711e4a37bfbd8ab8dfbf066451c8163652dab384527f7ff5473396c6fbacd8bb1eeaabcbeffcf6292e6f9fd44368ed534c3f32d0cc417272e56810fada3dea150427db35f9cfa174b265f94d12eeac49499c2f3ebe925dedd4af086b35603995", 0xf5, 0x7cf}, {&(0x7f0000001300)="4368bb616529a31128663467810419b8bda0194d463079da48b6b468e4310a230690988aa81baf4473960fc18c51ccdcab3a97b6d3780823d0a84d6deb56b8085478e838d862ef3cb0176c604a79fc68265da0f0dbb8bf4dd6dbe067bf703dd8cb79052a218b9362d4424b53fa1f09f9bb6b6d671038b931446608bdc648cb71a93e0befad4b5da29c6fe495f2c7d4eadf1d547417c0d3d0f7cc1ecf45f4ba62cd03522836c7d1cddedbe67ef57794b842417492240809bf8f073acbefe22785ee2ab6fe860a348867cca4222239c23601b42353cee4e31d6b9d4c48f7b2ad174f1f21e7aea5f3e0f381", 0xea}, {&(0x7f0000001400)="c093c88417a6981c7cb7055ee2d48e8d96dd053cbb63c13e40391cb977a1093e32af0c85bbfec39c974b0d9bf6efc0a47fbedbba81a31effafe9836d0bd24dab62bd2a891ed9c338bb5419ab9bd9651aad0706048f1c105113d4cd110f34b4a87951b55777c3d9ef5f389985f28ac56c0d02f5e6a6f6c46ad23b166c5db52291fee8cc0b6d1f53b470592a777f7c3a3091f9fbd5245a7ef8b39ff5edddc6092ab2f99758948ca6050472101f3fc48849b633cd", 0xb3, 0x2}], 0x10c00, &(0x7f0000001540)={[{@resuid={'resuid', 0x3d, 0xee00}}, {@orlov}, {@grpid}, {@jqfmt_vfsv1}, {@sb={'sb', 0x3d, 0x8}}, {@grpquota}, {@nobarrier}, {@data_ordered}, {@discard}, {@orlov}], [{@dont_measure}, {@smackfstransmute}]}) [ 3110.917537] FAULT_INJECTION: forcing a failure. [ 3110.917537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3110.919336] CPU: 0 UID: 0 PID: 49891 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3110.919373] Tainted: [W]=WARN [ 3110.919381] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3110.919394] Call Trace: [ 3110.919402] [ 3110.919410] dump_stack_lvl+0xfa/0x120 [ 3110.919453] should_fail_ex+0x4d7/0x5e0 [ 3110.919486] _copy_from_iter+0x1dc/0x1660 [ 3110.919517] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3110.919544] ? do_raw_spin_lock+0x123/0x260 [ 3110.919577] ? __pfx__copy_from_iter+0x10/0x10 [ 3110.919603] ? find_held_lock+0x2b/0x80 [ 3110.919643] ? __create_object+0x59/0x80 [ 3110.919678] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3110.919709] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3110.919734] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3110.919773] copy_page_from_iter+0xe3/0x180 [ 3110.919806] bio_copy_from_iter+0x108/0x270 [ 3110.919851] blk_rq_map_user_iov+0xc07/0x1180 [ 3110.919898] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3110.919938] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3110.919971] ? find_held_lock+0x2b/0x80 [ 3110.920004] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3110.920029] ? lock_release+0xc8/0x290 [ 3110.920052] ? import_ubuf+0x1be/0x220 [ 3110.920082] blk_rq_map_user_io+0x1cf/0x200 [ 3110.920119] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3110.920155] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3110.920193] ? irq_work_queue+0x9c/0x100 [ 3110.920225] ? __asan_memset+0x24/0x50 [ 3110.920254] sg_common_write.constprop.0+0xd75/0x1710 [ 3110.920289] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3110.920314] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3110.920345] ? ___ratelimit+0x465/0xa10 [ 3110.920385] sg_write.part.0+0x6a2/0xb50 [ 3110.920410] ? __pfx_sg_write.part.0+0x10/0x10 [ 3110.920437] ? perf_trace_lock+0xb5/0x5d0 [ 3110.920469] ? __pfx_perf_trace_lock+0x10/0x10 [ 3110.920500] ? lock_acquire+0x15e/0x2f0 [ 3110.920527] ? perf_trace_lock+0xb5/0x5d0 [ 3110.920551] ? find_held_lock+0x2b/0x80 [ 3110.920583] ? get_pid_task+0xfd/0x250 [ 3110.920608] ? perf_trace_lock+0xb5/0x5d0 [ 3110.920638] ? avc_policy_seqno+0x9/0x20 [ 3110.920657] ? selinux_file_permission+0x99/0x600 [ 3110.920695] sg_write+0x86/0xe0 [ 3110.920717] vfs_write+0x2b7/0x1150 [ 3110.920739] ? __pfx_sg_write+0x10/0x10 [ 3110.920761] ? lock_acquire+0x15e/0x2f0 [ 3110.920785] ? __fget_files+0x34/0x3b0 [ 3110.920807] ? __pfx_vfs_write+0x10/0x10 [ 3110.920831] ? __fget_files+0x203/0x3b0 [ 3110.920853] ? lock_release+0xc8/0x290 [ 3110.920883] ? __fget_files+0x20d/0x3b0 [ 3110.920916] ksys_write+0x121/0x240 [ 3110.920940] ? __pfx_ksys_write+0x10/0x10 [ 3110.920974] do_syscall_64+0xbf/0x360 [ 3110.920998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3110.921020] RIP: 0033:0x7efff4616b19 [ 3110.921038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3110.921059] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3110.921082] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3110.921097] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3110.921111] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.921125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3110.921138] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3110.921171] 12:59:00 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x300044, 0x0) [ 3111.016854] Invalid option length (1047482) for dns_resolver key [ 3111.053000] loop2: detected capacity change from 0 to 264192 [ 3111.060428] EXT4-fs: Ignoring removed orlov option 12:59:00 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x230c020, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x87) pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='\x00') creat(&(0x7f0000000180)='./file1\x00', 0x100) [ 3111.063557] EXT4-fs: Ignoring removed orlov option [ 3111.064044] ext2: Unknown parameter 'dont_measure' 12:59:00 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/4096, 0x1000) capset(&(0x7f0000001340)={0x20071026}, &(0x7f0000001380)={0x1, 0x457, 0x3, 0x6, 0x7, 0x2}) lsetxattr$trusted_overlay_redirect(&(0x7f0000001280)='./file0\x00', &(0x7f00000012c0), &(0x7f0000001300)='./file0\x00', 0x8, 0x2) mount(&(0x7f00000013c0)=@md0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='ocfs2\x00', 0x0, 0x0) mount(&(0x7f0000001180)=@md0, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)='omfs\x00', 0x30a0, &(0x7f0000001240)='\x00') 12:59:00 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:00 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r0) 12:59:00 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f00000002c0)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() keyctl$get_security(0x11, r2, &(0x7f00000004c0)=""/207, 0xcf) munlockall() [ 3111.247307] Invalid option length (1047482) for dns_resolver key [ 3111.287581] Invalid option length (1047482) for dns_resolver key 12:59:11 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 65) 12:59:11 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:11 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r3, 0x5380) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:59:11 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) capset(&(0x7f00000005c0)={0x20080522, r0}, &(0x7f0000000600)={0x3, 0x9, 0xfff, 0x8, 0xc3ec, 0x100}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 12:59:11 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000001540)=@abs, 0x6e, &(0x7f0000002800)=[{&(0x7f00000015c0)=""/89, 0x59}, {&(0x7f0000001640)=""/227, 0xe3}, {&(0x7f0000001740)=""/114, 0x72}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f00000027c0)=""/59, 0x3b}], 0x6, &(0x7f0000002880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000002980)=""/94, 0x5e}, {&(0x7f0000002a00)=""/69, 0x45}, {&(0x7f0000002a80)=""/224, 0xe0}, {&(0x7f0000002b80)=""/97, 0x61}, {&(0x7f0000002c00)=""/225, 0xe1}, {&(0x7f0000002d00)=""/227, 0xe3}], 0x6, &(0x7f0000002e80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x2, 0x40002000, &(0x7f0000002fc0)={0x0, 0x989680}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) r2 = socket$packet(0x11, 0x4, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) getsockname(r0, &(0x7f0000003000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, &(0x7f0000003080)=0x80) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$sock(r1, &(0x7f00000014c0)={&(0x7f0000000140)=@xdp={0x2c, 0x0, r4, 0x5}, 0x80, &(0x7f0000001400)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="1387deacdef861ec5fd6bc01140e4be11a946595e152dc8493eca15a4eb49ff811326b5b0a9b03a88ca81892e92844c03ec79d09686bf459a0591b0d0e539f7eb73939bc", 0x44}, {&(0x7f0000001240)="84128dffb5324115d628a94dcc17bd68e2bd05f9d4661020eb729f1d409f4c25f5f1e63677186404629a370454861ec0c6f3cf2aba94c441f62ba9e22f651809537d42b3186cbc52bba41aa91a2315d1c23ac68f0c102c6d9b323537326e05e4e0c3d85ec23fa0c48a789eee552dc82c0f0304d3bee6b236445b5512be4ccc853b8fa802858d0efd64ce6ac9a5857eaae72e36d08b978ccb59654fddbfa20d5a77c3fe579e1a", 0xa6}, {&(0x7f0000001500)="aa6084f515d091ed2f083276d408b46100", 0x11}, {&(0x7f0000001300)="03ba348a4db10baaca5429981040495dd57c3219c1b91c0ca67bc551ed7e373258bddc15bd8b29428487b9db0e28826775316e8b068e9d0fcf9802d82b8c42ca076add206c32a2bd8e9e7c140af02d0bd73c3aa2fb273130a7505ab774d061e716cc4e0d07c60c9035fefdf8be3a8dbc50805ee86c334dcdd054ecf170802ea1db4275cc5c16026d92d12f4f237ceff703197a090288a4ae437302f8ab5d8fbb653f27223996bfd131a87b9147e20062d7afe66b6d50c7cb6fc66da28f7cb4a722ff06787cd4f12c1ee789b23c310bdc57229ca87801a21b4c84c4774c6d3774dc281cf6b83c0f262aaf4036c812", 0xee}], 0x5, &(0x7f0000001480)=[@timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x30}, 0x20000080) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:59:11 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000300), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, r0) 12:59:11 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) uname(&(0x7f00000004c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 12:59:11 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x3, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='\x00'/12], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 3122.592013] Invalid option length (1047482) for dns_resolver key 12:59:11 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f00000001c0)=""/76, 0x4c) 12:59:11 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3122.636069] Invalid option length (1047482) for dns_resolver key [ 3122.639852] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3122.639852] program syz-executor.1 not setting count and/or reply_len properly [ 3122.642614] debugfs: Bad value for 'source' [ 3122.654980] FAULT_INJECTION: forcing a failure. [ 3122.654980] name failslab, interval 1, probability 0, space 0, times 0 [ 3122.656855] CPU: 0 UID: 0 PID: 50240 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3122.656895] Tainted: [W]=WARN [ 3122.656903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3122.656917] Call Trace: [ 3122.656926] [ 3122.656935] dump_stack_lvl+0xfa/0x120 [ 3122.656980] should_fail_ex+0x4d7/0x5e0 [ 3122.657016] should_failslab+0xc2/0x120 [ 3122.657048] __kmalloc_noprof+0xc8/0x6e0 [ 3122.657082] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3122.657119] ? bio_copy_from_iter+0x192/0x270 [ 3122.657155] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3122.657199] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3122.657235] blk_rq_map_user_iov+0x1fd/0x1180 [ 3122.657284] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3122.657327] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3122.657364] ? find_held_lock+0x2b/0x80 [ 3122.657399] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3122.657426] ? lock_release+0xc8/0x290 [ 3122.657450] ? import_ubuf+0x1be/0x220 [ 3122.657483] blk_rq_map_user_io+0x1cf/0x200 [ 3122.657523] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3122.657580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3122.657637] ? irq_work_queue+0x9c/0x100 [ 3122.657671] ? __asan_memset+0x24/0x50 [ 3122.657701] sg_common_write.constprop.0+0xd75/0x1710 [ 3122.657739] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3122.657765] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3122.657798] ? ___ratelimit+0x465/0xa10 [ 3122.657842] sg_write.part.0+0x6a2/0xb50 [ 3122.657869] ? __pfx_sg_write.part.0+0x10/0x10 [ 3122.657898] ? perf_trace_lock+0xb5/0x5d0 [ 3122.657932] ? __pfx_perf_trace_lock+0x10/0x10 [ 3122.657966] ? lock_acquire+0x15e/0x2f0 [ 3122.657994] ? perf_trace_lock+0xb5/0x5d0 [ 3122.658020] ? find_held_lock+0x2b/0x80 [ 3122.658054] ? get_pid_task+0xfd/0x250 [ 3122.658082] ? perf_trace_lock+0xb5/0x5d0 [ 3122.658114] ? avc_policy_seqno+0x9/0x20 [ 3122.658134] ? selinux_file_permission+0x99/0x600 [ 3122.658175] sg_write+0x86/0xe0 [ 3122.658198] vfs_write+0x2b7/0x1150 [ 3122.658225] ? __pfx_sg_write+0x10/0x10 [ 3122.658248] ? lock_acquire+0x15e/0x2f0 [ 3122.658274] ? __fget_files+0x34/0x3b0 [ 3122.658298] ? __pfx_vfs_write+0x10/0x10 [ 3122.658324] ? __fget_files+0x203/0x3b0 [ 3122.658347] ? lock_release+0xc8/0x290 [ 3122.658379] ? __fget_files+0x20d/0x3b0 [ 3122.658415] ksys_write+0x121/0x240 [ 3122.658440] ? __pfx_ksys_write+0x10/0x10 [ 3122.658478] do_syscall_64+0xbf/0x360 [ 3122.658504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3122.658530] RIP: 0033:0x7efff4616b19 [ 3122.658557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3122.658593] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3122.658629] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3122.658653] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3122.658667] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3122.658681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3122.658695] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3122.658731] 12:59:11 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) [ 3122.725456] Invalid option length (1047482) for dns_resolver key 12:59:11 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2b4940) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 12:59:11 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 12:59:23 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x65) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 12:59:23 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2f6465762f6e756c6c623000a505b775e2ab875f042798b0d7e1a3437e3e82a522"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:59:23 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$TIOCGPKT(r3, 0x80045438, &(0x7f0000000040)) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @val={0x3a, [0x2d, 0x33, 0x2c, 0x30, 0x33]}}}}, {@gid={'gid', 0x3d, r4}}]}) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x84, &(0x7f00000001c0)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r4}}, {@fscache}, {@access_client}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@uname={'uname', 0x3d, '/dev/sg#\x00'}}, {@mmap}, {@mmap}], [{@obj_type={'obj_type', 0x3d, '\xc0---\':\xf8{.]!'}}]}}) r5 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r5, 0x2202, 0x0) 12:59:23 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) uname(&(0x7f00000004c0)=""/4096) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) munlockall() 12:59:23 executing program 3: r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002880)={{0x1, 0x1, 0x18, r0, {0x3}}, './file1\x00'}) r1 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x40030, 0x0) statx(r1, &(0x7f0000000040)='./file0\x00', 0x2000, 0x502, &(0x7f0000000140)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000440)=""/37, 0x25}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/64, 0x40}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/148, 0x94}, {&(0x7f0000002580)=""/127, 0x7f}], 0x6, &(0x7f0000002680)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x88}, 0x10100) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) openat$dir(0xffffffffffffff9c, &(0x7f00000028c0)='./file1\x00', 0x0, 0xc4) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=ANY=[@ANYBLOB='mpol=interleave=static,gid=', @ANYRESHEX=r3, @ANYBLOB]) syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x100, 0x2, &(0x7f0000000400)=[{&(0x7f00000002c0)="f9b859980abfc1541b59baf51b544ea5a449be3a0cc6b89b842181af8a6096385e58df2a2ba18c1106029aaf6f738ee1cbb784c8bab2e48f46229c278857c00104cce5aae6a4bc8698bf208b466ebe4741849487b2200b16e7ff028e85d4ece4fd0dd3a5520f03ea1bf0e9a37e21138da0313ca3d3d60b11d1a41c12e04252f201ccc7be08430af6ba53e51d54f34f07bc09561470da04376deb80ee7da466cdf62a095d5f11cb514f00917cdf9362f2acc8a7b3fa070bca5da81773a198ce91a11067f900", 0xc5, 0x8}, {&(0x7f00000003c0)="a29364f2ef2dc43c497788aa229766e9394911894892f54772c3434b69ff9be10878020f1bea0bf9abbd9fcd11cfab36", 0x30, 0x7}], 0x81000, &(0x7f0000002780)={[{@huge_never}, {@huge_never}, {@huge_always}, {@gid={'gid', 0x3d, r2}}, {@size={'size', 0x3d, [0x55, 0x35, 0x33, 0x36]}}, {@gid={'gid', 0x3d, r3}}, {@huge_advise}, {@huge_within_size}], [{@fsuuid={'fsuuid', 0x3d, {[0x62, 0x62, 0x61, 0x30, 0x5, 0x36, 0x66, 0x64], 0x2d, [0x61, 0x32, 0x36, 0x64], 0x2d, [0x5, 0x38, 0x39, 0x34], 0x2d, [0x36, 0x66, 0x36, 0x32], 0x2d, [0x56, 0x35, 0x30, 0x37, 0x39, 0x36, 0x66, 0x63]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '@'}}, {@pcr={'pcr', 0x3d, 0x15}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:59:23 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 66) 12:59:23 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:23 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r2, 0x0, 0x0) keyctl$link(0x8, r0, r2) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) [ 3134.789096] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3134.789096] program syz-executor.1 not setting count and/or reply_len properly [ 3134.795506] Invalid option length (1047482) for dns_resolver key [ 3134.803667] Invalid option length (1047482) for dns_resolver key 12:59:24 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+60000}}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:59:24 executing program 2: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:24 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) 12:59:24 executing program 5: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000400)=""/223, 0xdf) r1 = getuid() r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x7, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="18b7676e14a195b14857df92893f98894f1d756967979d6b1646c6df3ee391679587c2562a8a3aec015aeffcc12e8d42f6b67b2ed75312481533d2fab4a830f69596", 0x42, 0x1}], 0x10000, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x400}}, {@uid={'uid', 0x3d, r1}}, {@size={'size', 0x3d, [0x36, 0x65, 0x67, 0x33, 0x74, 0xf, 0x74, 0x32, 0x35]}}, {@huge_within_size}, {@nr_inodes={'nr_inodes', 0x3d, [0x38, 0x74]}}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'security.evm\x00'}}]}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) name_to_handle_at(r2, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)=@nfs={0x90, 0x24, {0x3f, 0xfe3e, 0x5, 0x80, "26fa80a7661805ee576a0f61432fd9539aeac5692b0e3a0309edd6d361dcc4cef7966d52809df7eeb03451f3741f29a638df53b259e0253427eb5470bad9ddc11451bc8b304d17eb89f0f619e08c5db1a7521d1d26bd7b0753ef43082a020f08f8a491f4955242b4827c78a1ec98a3000bd2447c78f6ad5e3f2e223ac1f3319b"}}, &(0x7f00000003c0), 0x1400) mount$9p_xen(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x81802c, &(0x7f00000005c0)={'trans=xen,', {[{@mmap}, {@access_user}, {@fscache}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@fsname}]}}) 12:59:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 67) 12:59:24 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x2000001, &(0x7f0000000180)='(%\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 3135.012824] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 3135.044404] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3135.044404] program syz-executor.1 not setting count and/or reply_len properly [ 3135.057301] FAULT_INJECTION: forcing a failure. [ 3135.057301] name failslab, interval 1, probability 0, space 0, times 0 [ 3135.058993] CPU: 1 UID: 0 PID: 50603 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3135.059030] Tainted: [W]=WARN [ 3135.059037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3135.059051] Call Trace: [ 3135.059059] [ 3135.059068] dump_stack_lvl+0xfa/0x120 [ 3135.059110] should_fail_ex+0x4d7/0x5e0 [ 3135.059137] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3135.059166] should_failslab+0xc2/0x120 [ 3135.059195] __kmalloc_noprof+0xc8/0x6e0 [ 3135.059228] ? trace_kmalloc+0x1f/0xb0 [ 3135.059254] ? __kmalloc_noprof+0x29d/0x6e0 [ 3135.059285] ? bio_kmalloc+0x3e/0x70 [ 3135.059311] ? bio_copy_from_iter+0x192/0x270 [ 3135.059366] ? bio_kmalloc+0x3e/0x70 [ 3135.059390] bio_kmalloc+0x3e/0x70 [ 3135.059418] blk_rq_map_user_iov+0x390/0x1180 [ 3135.059464] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3135.059504] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3135.059538] ? find_held_lock+0x2b/0x80 [ 3135.059571] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3135.059595] ? lock_release+0xc8/0x290 [ 3135.059625] ? import_ubuf+0x1be/0x220 [ 3135.059656] blk_rq_map_user_io+0x1cf/0x200 [ 3135.059693] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3135.059729] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3135.059768] ? irq_work_queue+0x9c/0x100 [ 3135.059799] ? __asan_memset+0x24/0x50 [ 3135.059827] sg_common_write.constprop.0+0xd75/0x1710 [ 3135.059862] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3135.059887] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3135.059918] ? ___ratelimit+0x465/0xa10 [ 3135.059958] sg_write.part.0+0x6a2/0xb50 [ 3135.059983] ? __pfx_sg_write.part.0+0x10/0x10 [ 3135.060010] ? perf_trace_lock+0xb5/0x5d0 [ 3135.060042] ? __pfx_perf_trace_lock+0x10/0x10 [ 3135.060073] ? lock_acquire+0x15e/0x2f0 [ 3135.060100] ? perf_trace_lock+0xb5/0x5d0 [ 3135.060124] ? find_held_lock+0x2b/0x80 [ 3135.060156] ? get_pid_task+0xfd/0x250 [ 3135.060181] ? perf_trace_lock+0xb5/0x5d0 [ 3135.060211] ? avc_policy_seqno+0x9/0x20 [ 3135.060230] ? selinux_file_permission+0x99/0x600 [ 3135.060268] sg_write+0x86/0xe0 [ 3135.060290] vfs_write+0x2b7/0x1150 [ 3135.060313] ? __pfx_sg_write+0x10/0x10 [ 3135.060335] ? lock_acquire+0x15e/0x2f0 [ 3135.060359] ? __fget_files+0x34/0x3b0 [ 3135.060381] ? __pfx_vfs_write+0x10/0x10 [ 3135.060405] ? __fget_files+0x203/0x3b0 [ 3135.060426] ? lock_release+0xc8/0x290 [ 3135.060456] ? __fget_files+0x20d/0x3b0 [ 3135.060489] ksys_write+0x121/0x240 [ 3135.060513] ? __pfx_ksys_write+0x10/0x10 [ 3135.060548] do_syscall_64+0xbf/0x360 [ 3135.060572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3135.060596] RIP: 0033:0x7efff4616b19 [ 3135.060613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3135.060635] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3135.060657] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3135.060673] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3135.060686] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3135.060700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3135.060713] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3135.060746] 12:59:24 executing program 2: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:24 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) 12:59:24 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0xfffffe9e, 0x0, 0x2010, 0x0) chroot(&(0x7f0000000000)='./file0\x00') r0 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) mount(&(0x7f0000000240)=@md0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='ext4\x00', 0x2000000, &(0x7f0000000300)='debugfs\x00') accept4(r0, &(0x7f0000000180)=@phonet, &(0x7f0000000200)=0x80, 0x1e0612b2ee6b368f) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:59:24 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) statx(r0, &(0x7f0000000140)='./file0\x00', 0x4000, 0x100, &(0x7f0000000180)) mount$9p_rdma(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@rq={'rq', 0x3d, 0xc3c7}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@dont_hash}]}}) 12:59:24 executing program 6: r0 = socket(0x1, 0x800, 0x8) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x4}}}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40c0}, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x180, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="280400001b5de51ff89eb468c84f967ac8a380c86fd07bcc87f710f03b4c5172c1457150d05025c6e41c2e611c426d9e2d870c9496a9154d593118c89f05", @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000000}, 0x4) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = dup2(r6, r1) ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0) [ 3135.392175] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 12:59:24 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x400, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) r3 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000440), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f00000005c0)={0x7b804500, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0xa3) munlockall() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup.net/syz1\x00', 0x200002, 0x0) munlockall() [ 3135.521683] Invalid option length (1047482) for dns_resolver key 12:59:37 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280)=0x0, 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) r3 = openat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x20002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffa}}, './file0\x00'}) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x20, 0x8, 0x7, 0x2, 0x0, 0x9, 0x1484, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x2a0, 0x7f, 0xfffffffd, 0x5, 0x2, 0x1000, 0x100, 0x0, 0xff, 0x0, 0x8001}, r2, 0x10, r4, 0x9) munlockall() munlockall() 12:59:37 executing program 6: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee00}}, './file0\x00'}) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r1, 0xa, r4, 0x12) r5 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x304, 0x3b, 0x10, 0x70bd2d, 0x25dfdbfe, {0x7}, [@typed={0x4, 0x69}, @typed={0x8, 0x36bc, 0x0, 0x0, @pid=r1}, @generic="25658f313519e501fa057513398fb1a37a1a6373999b7ae9abe580c294421eea1cb28ee9c5fdd2d0269e72eb609d51174b2ccec5ca4aea3a5aa335df67044c61e2cd2afc0b9be9cb00d7a7e360ee972cfc6614", @typed={0x82, 0x65, 0x0, 0x0, @binary="ea3bbe82048860e588778de3bb4cc4fbe8bc042d7179b7806f2d34a27b28aaa9400229bc6f636df1ff179ef33cdcd2d9b20efd5524d954dcd094117c70a5ce6b245fa447ed02bbb9fe85f7c6f6db1fff2022654fc189a708acffe0ae4fa9de81ab0d19db228eb6f46c606fd69b6b72cc2c9ab4487ed7b89ff65b0c240b1d"}, @generic="19ffae036bc0ea107491d0f1177d617ae242b1d04d3928f851656d61f9342bfdbe325831f44c7756d1dd9a34b7538293c8caae1eec49524dcb717e9277d9eed72f35113bc0a6f74ec29032eb94a38ebe9c086c81f50f90a30a868ae58609", @generic="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", @nested={0x54, 0x47, 0x0, 0x1, [@typed={0x45, 0x3d, 0x0, 0x0, @binary="4bb7469dc6d62ca8c9920a0b6ac67c5a058250a0af089203f5ba78053e1b5bda00495f43d6e434d460beaee201a6c1656e1834f35c27982efdbe6197ceb96e18dd"}, @typed={0x8, 0x41, 0x0, 0x0, @fd=r5}]}, @generic="beb8e3d91b5ec5d4b4cba365eecc688a808016291c6a11e8cbf448c85141de1a50b7159b754ef85a3671c82b6f25012dd44c669ff6601c2ad89a6657efb4eefa343a81e9c6617fee8c3aa37a19e278769ff14f0efe04f7b65da45494e745"]}, 0x304}, 0x1, 0x0, 0x0, 0x4048000}, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = dup2(r7, r6) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x490c01, 0x0) ioctl$TIOCGPTLCK(r9, 0x80045439, &(0x7f00000001c0)) ioctl$SG_GET_TIMEOUT(r8, 0x2202, 0x0) 12:59:37 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) 12:59:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 68) 12:59:37 executing program 2: mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:37 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = fork() capset(&(0x7f0000005780)={0x20071026, r4}, &(0x7f00000057c0)={0x4, 0x6, 0x20000, 0x8, 0x4, 0x7fffffff}) r5 = dup2(r3, r2) write$binfmt_aout(r5, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r5, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x1}, 0x40, 0x0, 0x0, 0x3, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x8}, r1, 0xa, r5, 0x12) capset(&(0x7f0000005700)={0x20071026, r1}, &(0x7f0000005740)={0x6, 0x7fffffff, 0x1, 0x3, 0x2, 0x59}) capget(&(0x7f0000001240)={0x20071026, r1}, &(0x7f00000056c0)={0x2e, 0x0, 0x20, 0x1, 0x7}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005540)=[{{&(0x7f0000000140)=@rc, 0x80, &(0x7f0000001440)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)}, {&(0x7f0000001280)=""/213, 0xd5}, {&(0x7f0000001380)=""/139, 0x8b}], 0x5, &(0x7f00000014c0)=""/155, 0x9b}, 0x8}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001580)=""/194, 0xc2}, {&(0x7f0000001680)=""/165, 0xa5}], 0x2, &(0x7f0000001780)=""/4096, 0x1000}}, {{&(0x7f0000002780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002800)=""/155, 0x9b}, {&(0x7f00000028c0)=""/64, 0x40}, {&(0x7f0000002900)=""/9, 0x9}, {&(0x7f0000002940)=""/3, 0x3}, {&(0x7f0000002980)=""/47, 0x2f}, {&(0x7f00000029c0)=""/39, 0x27}, {&(0x7f0000002a00)=""/250, 0xfa}, {&(0x7f0000002b00)=""/140, 0x8c}], 0x8, &(0x7f0000002c40)=""/11, 0xb}, 0x7f}, {{&(0x7f0000002c80)=@nfc_llcp, 0x80, &(0x7f0000004140)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/238, 0xee}, {&(0x7f0000003e00)=""/177, 0xb1}, {&(0x7f0000003ec0)=""/199, 0xc7}, {&(0x7f0000003fc0)=""/233, 0xe9}, {&(0x7f00000040c0)=""/111, 0x6f}], 0x6}, 0x5}, {{&(0x7f00000041c0)=@sco, 0x80, &(0x7f0000004500)=[{&(0x7f0000004240)=""/255, 0xff}, {&(0x7f0000004340)=""/191, 0xbf}, {&(0x7f0000004400)=""/230, 0xe6}], 0x3, &(0x7f0000004540)=""/4096, 0x1000}, 0x8}], 0x5, 0x22, &(0x7f0000005680)={0x77359400}) dup2(r0, r6) capset(&(0x7f0000005840)={0x20080522}, &(0x7f0000005880)={0x8000, 0x800, 0x8, 0x100, 0x4, 0x2}) openat$dir(0xffffffffffffff9c, &(0x7f0000005800)='./file0\x00', 0x280002, 0xa) 12:59:37 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)={0x8d, 0x29, 0x1, {0x576, [{{0x20, 0x2, 0x4}, 0xf136, 0x0, 0x7, './file0'}, {{0x2, 0x3, 0x3}, 0x4, 0x40, 0x7, './file0'}, {{0x80, 0x2, 0x4}, 0x4, 0x2, 0x7, './file0'}, {{0x2, 0xdb, 0x6}, 0x100, 0x20, 0xd, './file0/file0'}]}}, 0x8d) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) 12:59:37 executing program 0: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x50, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x6100}, 0x91cd034e4809f27}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x17}, 0x3c8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) syz_io_uring_submit(r0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x3, 0x6000, @fd=r1, 0xfffffffffffffffc, &(0x7f00000002c0)=[{&(0x7f0000000140)="ef01ab07773702e1170d34bbabfc6501e367d5184c44ca5b9cf3ab3a87505dc7fe51003a20953927ae750f6feb5038e8ed5333b905efbb36ff3a597d64cb8ad71db622b1e40a2afe6b3c06e5f2eb759e1217778303d6265c9b7ea02825acbc7a2b7aac57705d3b427623dc20a69fb137669ed967a1776da275af95725a5cfb14142da6021349b96b38a6dee1cf6f091e6476ebbff4874229210475e57d176409dc6cc0d9d2f933f8d34b1bf310969ef301e8912951", 0xb5}, {&(0x7f0000000200)="be4024645698ac89b6e5685b165d2b5348ef7a37e5a70419337e3c608391ad9f13be278a5db0183f2154b2ad8c9f0f505bdffb024473169030311302fac1a2b825457b6a319fffe26608ea8c317b7eae270cf1a41dbb93bbec757aa6b7d96a09d2d94b1d27be962c84614179de47cb7aad6efbe834b9c13052de24e0cdea21e516345afb56188e822df0", 0x8a}], 0x2, 0x1, 0x0, {0x3}}, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:59:37 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$link(0x8, r0, r1) [ 3148.595158] Invalid option length (1047482) for dns_resolver key [ 3148.614478] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3148.614478] program syz-executor.1 not setting count and/or reply_len properly 12:59:37 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x12, 0x3, 0x101, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x7}, [@generic="daa5006ceb3997487c563602d65c97da43a4a48d1485aaed4ff2b6f12476a3b1460acb458872321947176a7ef9b997accb97c8fbe8ca391cc02bde485d5c760061fe66624299a6ec8857a8e6e3b546aa77f9bce4b9375a139d71fff2f868a4778840add5976f410843d931"]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044804) 12:59:52 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 12:59:52 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='securityfs\x00', 0xc0ed0000, 0x0) mount(&(0x7f00000005c0)=@nullb, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000640)='pvfs2\x00', 0x0, &(0x7f0000000200)='\xf1\xb44\xed\x01\x81\xbcR\x19-{,.,\x00\x00\x00\x00\x00\x00\xd0\xc2\xcdC\xc5\xc9K|\xab\xd1\x86\xe5ah#?y\xaf\xc7x\xa1~J\x00\x00\x00\x00\x00\x00\xe5\x8a\xd0B\xaa\xc1\xed\xd3\x01\xfd\xe2\xe1\x04\xdc\x9a\xf6\xd2vzru(%\xfb\xe0F\xe4\xe5Dz\xbe\xc9:\xfb\x7f\xa9O\xb8F\xb3;)[^7qHv\xff\xe6\x94\xe3\t\xec\x18\xbd\xe9\x957m\xf0Yk\xde:1\xf4\xbc\xf4\xc3%\xe6u\n$\xd1\xa8k\x10\xc9\xc4\x0e\x12V7Kd\xb1\x1d\x82\x8d\xb20\x19\x19\x80HM\x9c{\xd3\xa6\xe6\xc2=\x048\xdd\xdfV\xf6\xf3%Zx,*\x8b\xce\xed\x1f\x89\xb0]\xd2\x11\x14\xd7\x02)\x95Z:7\xc8\xdd\x141X\x91\x9bT\xee)') mount(&(0x7f0000000040)=@nullb, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140)='reiserfs\x00', 0xa0000, &(0x7f00000006c0)=']*\\(:!\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) fchown(0xffffffffffffffff, r1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000700)='./file1\x00', 0x1, 0x0, &(0x7f0000000740), 0x208000, &(0x7f0000000780)={[{@shortname_lower}], [{@pcr={'pcr', 0x3d, 0x12}}, {@measure}, {@uid_eq={'uid', 0x3d, r1}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@uid_gt}]}) 12:59:52 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f00000001c0)={0x20071026, r0}, &(0x7f0000000200)={0x0, 0x8, 0x9, 0x8, 0x6}) 12:59:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 69) 12:59:52 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, 0x0) 12:59:52 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() syz_io_uring_setup(0x1, &(0x7f00000014c0)={0x0, 0x0, 0x20, 0x2, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100), &(0x7f00000002c0)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x6100}, 0x91cd034e4809f27}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r4, 0xfffffffffffeffff, &(0x7f00000004c0)=""/4096, 0x1000, 0x5, 0x1, {0x0, r5}}, 0x92) munlockall() [ 3163.376128] vfat: Unknown parameter 'pcr' [ 3163.382307] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3163.382307] program syz-executor.1 not setting count and/or reply_len properly [ 3163.388447] Invalid option length (1047482) for dns_resolver key [ 3163.410919] FAULT_INJECTION: forcing a failure. [ 3163.410919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3163.412610] CPU: 0 UID: 0 PID: 51275 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3163.412652] Tainted: [W]=WARN [ 3163.412660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.412673] Call Trace: [ 3163.412681] [ 3163.412690] dump_stack_lvl+0xfa/0x120 [ 3163.412733] should_fail_ex+0x4d7/0x5e0 [ 3163.412766] _copy_from_iter+0x1dc/0x1660 [ 3163.412797] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3163.412825] ? do_raw_spin_lock+0x123/0x260 [ 3163.412857] ? __pfx__copy_from_iter+0x10/0x10 [ 3163.412883] ? find_held_lock+0x2b/0x80 [ 3163.412916] ? __create_object+0x59/0x80 [ 3163.412951] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3163.412982] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3163.413006] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3163.413041] copy_page_from_iter+0xe3/0x180 [ 3163.413075] bio_copy_from_iter+0x108/0x270 [ 3163.413120] blk_rq_map_user_iov+0xc07/0x1180 [ 3163.413167] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3163.413206] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3163.413240] ? find_held_lock+0x2b/0x80 [ 3163.413272] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3163.413296] ? lock_release+0xc8/0x290 [ 3163.413319] ? import_ubuf+0x1be/0x220 [ 3163.413349] blk_rq_map_user_io+0x1cf/0x200 [ 3163.413386] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3163.413422] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3163.413460] ? irq_work_queue+0x9c/0x100 [ 3163.413492] ? __asan_memset+0x24/0x50 [ 3163.413520] sg_common_write.constprop.0+0xd75/0x1710 [ 3163.413555] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3163.413580] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3163.413611] ? ___ratelimit+0x465/0xa10 [ 3163.413652] sg_write.part.0+0x6a2/0xb50 [ 3163.413677] ? __pfx_sg_write.part.0+0x10/0x10 [ 3163.413704] ? perf_trace_lock+0xb5/0x5d0 [ 3163.413735] ? __pfx_perf_trace_lock+0x10/0x10 [ 3163.413767] ? lock_acquire+0x15e/0x2f0 [ 3163.413793] ? perf_trace_lock+0xb5/0x5d0 [ 3163.413818] ? find_held_lock+0x2b/0x80 [ 3163.413850] ? get_pid_task+0xfd/0x250 [ 3163.413875] ? perf_trace_lock+0xb5/0x5d0 [ 3163.413904] ? avc_policy_seqno+0x9/0x20 [ 3163.413924] ? selinux_file_permission+0x99/0x600 [ 3163.413962] sg_write+0x86/0xe0 [ 3163.413984] vfs_write+0x2b7/0x1150 [ 3163.414007] ? __pfx_sg_write+0x10/0x10 [ 3163.414029] ? lock_acquire+0x15e/0x2f0 [ 3163.414053] ? __fget_files+0x34/0x3b0 [ 3163.414075] ? __pfx_vfs_write+0x10/0x10 [ 3163.414099] ? __fget_files+0x203/0x3b0 [ 3163.414120] ? lock_release+0xc8/0x290 [ 3163.414150] ? __fget_files+0x20d/0x3b0 [ 3163.414184] ksys_write+0x121/0x240 [ 3163.414207] ? __pfx_ksys_write+0x10/0x10 [ 3163.414242] do_syscall_64+0xbf/0x360 [ 3163.414266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3163.414290] RIP: 0033:0x7efff4616b19 [ 3163.414308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.414330] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3163.414352] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3163.414368] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3163.414382] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3163.414395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.414409] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3163.414442] 12:59:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)={0x68, 0x29, 0x1, {0x2, [{{0x0, 0x3, 0x6}, 0x4, 0x2, 0x7, './file0'}, {{0x8, 0x3, 0x2}, 0x3f, 0x7, 0x7, './file0'}, {{0x2, 0x2, 0x1}, 0x3, 0x3, 0x7, './file0'}]}}, 0x68) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 12:59:52 executing program 2: syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 12:59:52 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, 0x0) 12:59:52 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 12:59:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 70) 12:59:52 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$link(0x8, r0, 0x0) 12:59:52 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000400)) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @loopback}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r3}}]}) unlink(&(0x7f0000000380)='./file0\x00') pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000640)={0xd9, {{0x2, 0x4e20, @multicast2}}, 0x1, 0x8, [{{0x2, 0x4e22, @multicast1}}, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x4e20, @empty}}, {{0x2, 0x4e20, @private=0xa010100}}, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e24, @local}}, {{0x2, 0x4e23, @multicast2}}]}, 0x490) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2, r3}}, './file0\x00'}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCOUTQ(r6, 0x5411, &(0x7f0000000180)) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = dup2(r7, r6) ioctl$SG_GET_TIMEOUT(r8, 0x2202, 0x0) r9 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) preadv2(r9, &(0x7f0000000140)=[{&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/15, 0xf}], 0x3, 0x3, 0xffffff01, 0x11) 12:59:52 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465de92a573b68b7bfc08"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 3163.775288] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3163.775288] program syz-executor.1 not setting count and/or reply_len properly 12:59:52 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3163.795451] FAULT_INJECTION: forcing a failure. [ 3163.795451] name failslab, interval 1, probability 0, space 0, times 0 [ 3163.797236] CPU: 1 UID: 0 PID: 51467 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3163.797273] Tainted: [W]=WARN [ 3163.797281] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3163.797295] Call Trace: [ 3163.797303] [ 3163.797311] dump_stack_lvl+0xfa/0x120 [ 3163.797355] should_fail_ex+0x4d7/0x5e0 [ 3163.797390] should_failslab+0xc2/0x120 [ 3163.797419] __kmalloc_noprof+0xc8/0x6e0 [ 3163.797452] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3163.797487] ? bio_copy_from_iter+0x192/0x270 [ 3163.797521] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3163.797561] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3163.797594] blk_rq_map_user_iov+0x1fd/0x1180 [ 3163.797647] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3163.797686] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3163.797721] ? find_held_lock+0x2b/0x80 [ 3163.797754] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3163.797779] ? lock_release+0xc8/0x290 [ 3163.797802] ? import_ubuf+0x1be/0x220 [ 3163.797833] blk_rq_map_user_io+0x1cf/0x200 [ 3163.797870] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3163.797905] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3163.797944] ? irq_work_queue+0x9c/0x100 [ 3163.797974] ? __asan_memset+0x24/0x50 [ 3163.798002] sg_common_write.constprop.0+0xd75/0x1710 [ 3163.798037] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3163.798061] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3163.798092] ? ___ratelimit+0x465/0xa10 [ 3163.798133] sg_write.part.0+0x6a2/0xb50 [ 3163.798158] ? __pfx_sg_write.part.0+0x10/0x10 [ 3163.798185] ? perf_trace_lock+0xb5/0x5d0 [ 3163.798215] ? __pfx_perf_trace_lock+0x10/0x10 [ 3163.798247] ? lock_acquire+0x15e/0x2f0 [ 3163.798273] ? perf_trace_lock+0xb5/0x5d0 [ 3163.798297] ? find_held_lock+0x2b/0x80 [ 3163.798329] ? get_pid_task+0xfd/0x250 [ 3163.798354] ? perf_trace_lock+0xb5/0x5d0 [ 3163.798384] ? avc_policy_seqno+0x9/0x20 [ 3163.798403] ? selinux_file_permission+0x99/0x600 [ 3163.798441] sg_write+0x86/0xe0 [ 3163.798463] vfs_write+0x2b7/0x1150 [ 3163.798486] ? __pfx_sg_write+0x10/0x10 [ 3163.798508] ? lock_acquire+0x15e/0x2f0 [ 3163.798532] ? __fget_files+0x34/0x3b0 [ 3163.798554] ? __pfx_vfs_write+0x10/0x10 [ 3163.798577] ? __fget_files+0x203/0x3b0 [ 3163.798598] ? lock_release+0xc8/0x290 [ 3163.798628] ? __fget_files+0x20d/0x3b0 [ 3163.798660] ksys_write+0x121/0x240 [ 3163.798684] ? __pfx_ksys_write+0x10/0x10 [ 3163.798718] do_syscall_64+0xbf/0x360 [ 3163.798743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3163.798766] RIP: 0033:0x7efff4616b19 [ 3163.798783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3163.798805] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3163.798828] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3163.798843] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3163.798857] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3163.798871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3163.798885] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3163.798918] 12:59:53 executing program 5: capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x8, 0x0, 0x0, 0x40080, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x1, 0x4, &(0x7f00000013c0)=[{&(0x7f00000001c0)="fc8581b363acdf8ca0cb5404a5b69fa48e7fee43b2b528770d1e77b06dee48f7664112e8dd00f1409e44e94b2c5300e35b862d42dd80b341d94e79d5227fd09b61f83d7288b081c2c693201053d27cedc5eb8fffcfc2a28e58549179c6c588d40d2846add7297cb6bb847e9dc26bc9826a2994d92f07338768cc7ec632d23c1122776fc448a3033f01104ff380b6db92ea65fa1f46c239f97c5952de6a77946ed588638f0b68d73fefaa58bef5e09922d9c154193af62869ca41eaec053db488c929e7ecf8e499d43d268c7c8f3f8901f39d73bd12e08255", 0xd8, 0xae}, {&(0x7f00000002c0)="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", 0x1000, 0x2}, {&(0x7f00000012c0)="d8dfeaefc719015412cf240021024a2139377981d7ddb99adeee3532c57b0b84de06147d6ba1cd949e455c7d768f781f75fa8a86b0d053378f9a87e335663369188d5d94a3fb04a93beb511a6ce0f946099025cda5f888cff0ef8ab2abb12976ced4a87986fe117e99487196ec880f8caa33df03ba6f31a1bdaf96087c6613fda696871fcab66dc7acef1ec61ddda31f0b2ad4f0aeade3d0c28054", 0x9b, 0x2e5c}, {&(0x7f0000001380)="322ceb488476213266f6", 0xa, 0xff}], 0x200011, &(0x7f0000001440)={[{@mode={'mode', 0x3d, 0x8}}, {@huge_advise}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) openat2(r2, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x100, 0x0, 0x10}, 0x18) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = io_uring_setup(0x7a1, &(0x7f0000001480)={0x0, 0xca4c, 0x10, 0x3, 0x34a}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000001500)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) r6 = eventfd(0x5) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = eventfd2(0x7, 0x801) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) io_submit(0x0, 0x3, &(0x7f0000001980)=[&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, &(0x7f0000001600)="ec2a7f4f8a34f00ba69ff639ee570113ea83ffa542ca2683a487acbb8fe9b9fb8e051d4136c4649969600ac0b51e49c6011dfaedce6acb32e4a80a17e9404cc538950652da6fa262b7fdf608586432e438f678d720478d873a52ea897ae30b8ce888a027aff64c4cb96fa3c4a4a74f32b73f4d3841a3a8d61b1d0ee26d4984943050", 0x82, 0x100000001, 0x0, 0x1, r6}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x3, 0x480, r7, &(0x7f0000001700)="3a2c24087d07e4dd97bb0cad35ca8e5dddf126fa01cad334f5fb3bf13453bd8254e5bd6964b93c3cd47d824c9f435b5b843ef30c50a247725ca9a94fb123dd18690ad2ebd8538ac2808a7290204dfda5ce5eb1656a7d1563e30ece76cc15d37607504c8b6bbf6c24b86391ecbbe548f408f1cb39e8ad038ee64f17402adc41c8661f27c2bd09da1a78c758dd356a46347e9fce2a837b6154d4f6e7cb76e036ca0227ca1c0d039f492b759a937040d6e9a78888c0cc6bb8da49341cebbd3791ed7038d12c6ebb65d7b6431f292bf7925bb0e7d83ffbee8200b511f7ee5c573f9b6c05bcae33de907fae0f512133", 0xed, 0x4c, 0x0, 0x0, r8}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x5, 0xebfe, r9, &(0x7f0000001840)="a021e5e632abbfeb2e775ece7c805f25652ec1a9891d3d62f5bec6c471b63edf3d9d13f287a8e8180feb7d50cb01878527639765519b22fb6f2b8abf779b78f6b4404c5b71539c4fb5373be8f595175a6cb76639f1f41bef49ea6512e9f7ac96a92d3d95cd1d2b1f4e6984b276c1813e3aa3f2ce8053b3409048543e289d0b3390cc83f548b2929b5de9d00ddf9f081f403b65a60bda90597796aa56a25828b0f3378cb6292b980c5c2631c69bdaeb0fb9a6fab1d36400bbb7a460753b475634d1a1db19889d96fd16ca2f55aec5", 0xce, 0x3, 0x0, 0x2}]) 12:59:53 executing program 3: syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3f, 0xc0, 0x3, [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x4, 0x8a, 0x1}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x4f, 0xe5, 0x6, 0x8, 0x1f}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}}) r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x21a04188, 0x0, 0x0, 0x101010, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x8000, 0x1) 12:59:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 71) 12:59:53 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) [ 3163.985712] loop5: detected capacity change from 0 to 46 [ 3164.049878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3164.063173] loop5: detected capacity change from 0 to 46 [ 3164.072065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3164.101150] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3164.101150] program syz-executor.1 not setting count and/or reply_len properly [ 3164.110918] FAULT_INJECTION: forcing a failure. [ 3164.110918] name failslab, interval 1, probability 0, space 0, times 0 [ 3164.112807] CPU: 0 UID: 0 PID: 51637 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3164.112844] Tainted: [W]=WARN [ 3164.112852] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3164.112865] Call Trace: [ 3164.112873] [ 3164.112881] dump_stack_lvl+0xfa/0x120 [ 3164.112925] should_fail_ex+0x4d7/0x5e0 [ 3164.112959] should_failslab+0xc2/0x120 [ 3164.112988] __kmalloc_noprof+0xc8/0x6e0 [ 3164.113022] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3164.113061] ? bio_copy_from_iter+0x192/0x270 [ 3164.113096] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3164.113136] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3164.113169] blk_rq_map_user_iov+0x1fd/0x1180 [ 3164.113216] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3164.113259] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3164.113296] ? find_held_lock+0x2b/0x80 [ 3164.113333] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3164.113360] ? lock_release+0xc8/0x290 [ 3164.113384] ? import_ubuf+0x1be/0x220 [ 3164.113417] blk_rq_map_user_io+0x1cf/0x200 [ 3164.113455] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3164.113492] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3164.113532] ? irq_work_queue+0x9c/0x100 [ 3164.113568] ? __asan_memset+0x24/0x50 [ 3164.113597] sg_common_write.constprop.0+0xd75/0x1710 [ 3164.113639] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3164.113665] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3164.113696] ? ___ratelimit+0x465/0xa10 [ 3164.113737] sg_write.part.0+0x6a2/0xb50 [ 3164.113763] ? __pfx_sg_write.part.0+0x10/0x10 [ 3164.113792] ? perf_trace_lock+0xb5/0x5d0 [ 3164.113823] ? __pfx_perf_trace_lock+0x10/0x10 [ 3164.113862] ? lock_acquire+0x15e/0x2f0 [ 3164.113889] ? perf_trace_lock+0xb5/0x5d0 [ 3164.113913] ? find_held_lock+0x2b/0x80 [ 3164.113946] ? get_pid_task+0xfd/0x250 [ 3164.113971] ? perf_trace_lock+0xb5/0x5d0 [ 3164.114001] ? avc_policy_seqno+0x9/0x20 [ 3164.114021] ? selinux_file_permission+0x99/0x600 [ 3164.114060] sg_write+0x86/0xe0 [ 3164.114083] vfs_write+0x2b7/0x1150 [ 3164.114107] ? __pfx_sg_write+0x10/0x10 [ 3164.114130] ? lock_acquire+0x15e/0x2f0 [ 3164.114156] ? __fget_files+0x34/0x3b0 [ 3164.114179] ? __pfx_vfs_write+0x10/0x10 [ 3164.114203] ? __fget_files+0x203/0x3b0 [ 3164.114225] ? lock_release+0xc8/0x290 [ 3164.114257] ? __fget_files+0x20d/0x3b0 [ 3164.114292] ksys_write+0x121/0x240 [ 3164.114323] ? __pfx_ksys_write+0x10/0x10 [ 3164.114359] do_syscall_64+0xbf/0x360 [ 3164.114383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3164.114406] RIP: 0033:0x7efff4616b19 [ 3164.114423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3164.114445] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3164.114469] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3164.114485] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3164.114499] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3164.114513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3164.114526] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3164.114559] [ 3164.657132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3164.661321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 13:00:04 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='adfs\x00', 0x0, 0x0) 13:00:04 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 13:00:04 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20081, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0xf0, 0xde, 0x6, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0xc}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, 0xffffffffffffffff) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x57, 0x8, 0x9, 0x7d, 0x0, 0x6, 0x25080, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x6, 0x80000000003}, 0x40, 0x0, 0x0, 0x3, 0x0, 0x6, 0xb5, 0x0, 0x7, 0x0, 0x40430ced}, 0x0, 0xa, r3, 0x12) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0xe7, 0x7f, 0x7, 0x1, 0x0, 0x101, 0x10200, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x80000000}, 0x0, 0x8, 0x3f, 0x3, 0x3, 0x1, 0x2, 0x0, 0x10001, 0x0, 0x800}, 0x0, 0x10, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) munlockall() 13:00:04 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$link(0x8, 0x0, r0) 13:00:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000004600)={0x53, 0xfffffffffffffffb, 0x1d, 0xff, @scatter={0xa, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)=""/204, 0xcc}, {&(0x7f0000000280)=""/101, 0x65}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/247, 0xf7}, {&(0x7f0000002400)}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/12, 0xc}, {&(0x7f0000003480)=""/19, 0x13}]}, &(0x7f0000003580)="d209094323cfc8cd5be2fa68e504ad34077d58a051bf25dbcb0c5a0612", &(0x7f00000035c0)=""/4096, 0x1, 0x2, 0x0, &(0x7f00000045c0)}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 13:00:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x84c0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000400)=ANY=[@ANYBLOB="01f49900f00001000000183f0000d2dc3c3b5bd72f715d0e2b15f97e90bd29140e7401e0e86e261310427f94790d3d122a96154475758207451e694ffc55ec0ec69afce742e1a6f1043aac7a5bcd57c04738b46ed56cf91a3a1c6ea452e62fdee5a000caf6dedd0215519101e93b91dfc7da823b508dbfc1cefa6b53e3c0d740c9609469aa12e5542690a1e8042311bb6275f5bb78e307e558b743b3a57955ce4ecf894c3dead582142ca0646254", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}]}}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x40, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',debug=0x0000000000000000,permit_directio,fowner=', @ANYRESDEC=0xee00, @ANYBLOB=',euid<', @ANYRESDEC=0xee01, @ANYBLOB='\x00\x00']) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000340)='\xee@-$\x00b\x8b\x8cUa\x04_\xda\x8eQa`{\xf4\xb5{l\"mR>\xda\xf1\xcf<\x00\x90\xbe2\x97\xe9\xd9f\x802\x01\xee\xbd\xadD\x87\x89\x9d\xab\xe0\x98mF\x92\xa6\xac\xfb\x18\xd1\xb5', 0x0, 0xffffffffffffffff) pipe2(&(0x7f00000002c0), 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 13:00:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 72) 13:00:04 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x26, 0x1, &(0x7f0000000180)=[{&(0x7f0000000140), 0x0, 0x9}], 0x8000, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x0]}}, {@mode={'mode', 0x3d, 0x8}}], [{@uid_lt={'uid<', r1}}, {@smackfshat={'smackfshat', 0x3d, 'debugfs\x00'}}, {@obj_type={'obj_type', 0x3d, '[#{'}}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@subj_type={'subj_type', 0x3d, '}#]\xe2'}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 3175.580485] Invalid option length (1047482) for dns_resolver key 13:00:04 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3175.633155] tmpfs: Bad value for 'nr_inodes' [ 3175.644126] 9pnet_fd: Insufficient options for proto=fd [ 3175.674737] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3175.674737] program syz-executor.1 not setting count and/or reply_len properly [ 3175.686678] FAULT_INJECTION: forcing a failure. [ 3175.686678] name failslab, interval 1, probability 0, space 0, times 0 [ 3175.691510] CPU: 0 UID: 0 PID: 51742 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3175.691551] Tainted: [W]=WARN [ 3175.691558] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3175.691573] Call Trace: [ 3175.691581] [ 3175.691591] dump_stack_lvl+0xfa/0x120 [ 3175.691644] should_fail_ex+0x4d7/0x5e0 [ 3175.691686] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3175.691718] should_failslab+0xc2/0x120 [ 3175.691749] __kmalloc_noprof+0xc8/0x6e0 [ 3175.691784] ? trace_kmalloc+0x1f/0xb0 [ 3175.691811] ? __kmalloc_noprof+0x29d/0x6e0 [ 3175.691844] ? bio_kmalloc+0x3e/0x70 [ 3175.691871] ? bio_copy_from_iter+0x192/0x270 [ 3175.691915] ? bio_kmalloc+0x3e/0x70 [ 3175.691941] bio_kmalloc+0x3e/0x70 [ 3175.691970] blk_rq_map_user_iov+0x390/0x1180 [ 3175.692019] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3175.692061] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3175.692098] ? find_held_lock+0x2b/0x80 [ 3175.692133] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3175.692159] ? lock_release+0xc8/0x290 [ 3175.692184] ? import_ubuf+0x1be/0x220 [ 3175.692216] blk_rq_map_user_io+0x1cf/0x200 [ 3175.692256] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3175.692294] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3175.692336] ? irq_work_queue+0x9c/0x100 [ 3175.692369] ? __asan_memset+0x24/0x50 [ 3175.692399] sg_common_write.constprop.0+0xd75/0x1710 [ 3175.692436] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3175.692462] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3175.692496] ? ___ratelimit+0x465/0xa10 [ 3175.692539] sg_write.part.0+0x6a2/0xb50 [ 3175.692566] ? __pfx_sg_write.part.0+0x10/0x10 [ 3175.692595] ? perf_trace_lock+0xb5/0x5d0 [ 3175.692628] ? __pfx_perf_trace_lock+0x10/0x10 [ 3175.692662] ? lock_acquire+0x15e/0x2f0 [ 3175.692690] ? perf_trace_lock+0xb5/0x5d0 [ 3175.692716] ? find_held_lock+0x2b/0x80 13:00:04 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3175.692750] ? get_pid_task+0xfd/0x250 [ 3175.692777] ? perf_trace_lock+0xb5/0x5d0 [ 3175.692812] ? avc_policy_seqno+0x9/0x20 [ 3175.692832] ? selinux_file_permission+0x99/0x600 [ 3175.692873] sg_write+0x86/0xe0 [ 3175.692896] vfs_write+0x2b7/0x1150 [ 3175.692921] ? __pfx_sg_write+0x10/0x10 [ 3175.692944] ? lock_acquire+0x15e/0x2f0 [ 3175.692970] ? __fget_files+0x34/0x3b0 [ 3175.692993] ? __pfx_vfs_write+0x10/0x10 [ 3175.693018] ? __fget_files+0x203/0x3b0 [ 3175.693041] ? lock_release+0xc8/0x290 [ 3175.693073] ? __fget_files+0x20d/0x3b0 [ 3175.693108] ksys_write+0x121/0x240 [ 3175.693133] ? __pfx_ksys_write+0x10/0x10 [ 3175.693170] do_syscall_64+0xbf/0x360 [ 3175.693196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3175.693220] RIP: 0033:0x7efff4616b19 [ 3175.693239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3175.693261] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3175.693285] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3175.693302] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3175.693316] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3175.693330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3175.693344] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3175.693379] 13:00:05 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$link(0x8, 0x0, r0) 13:00:05 executing program 6: openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/connector\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000000c0)=0x4) r3 = dup2(r0, r0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x3) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) ioctl$SG_GET_TIMEOUT(r3, 0x2202, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file0/file0\x00'}) sendmsg(r7, &(0x7f00000028c0)={&(0x7f0000000380)=@ax25={{0x3, @null, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000280)="e9e996082849ca175ad54c62201b934d74676dddf3804939a3454302a31c4565002327108784cfb12c", 0x29}, {&(0x7f0000000400)="f311157d5c53c7e6dde334bfb58ae4d4976b9cc98e1fddbec9c9352e9ae47be0ba80001035753addacb99168b396f3b444285b2885add68bf71099021cb7c6d7d6a420744f9b1bd1bf47346d745f1137c0a0d19585af24a6a92ad957dc7763764f29ab2887884f786c6b16643ca72b24c4231590ff673d34a3249323a9c98c5d8aa26624b92cdcb71a9ec469390205ecc4b78543f62be050562bd592acfd795cbe5264a58bee24", 0xa7}], 0x2, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], 0x23d8}, 0x4040) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r8, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', r8, 0x0, 0x81, 0x7e, 0x6, 0x1, @private2, @ipv4={'\x00', '\xff\xff', @remote}, 0x17, 0x700, 0x4, 0x7}}) 13:00:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 73) 13:00:05 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) 13:00:05 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3175.914524] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3175.914524] program syz-executor.1 not setting count and/or reply_len properly 13:00:05 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x100000b, 0x0) 13:00:05 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x4008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r4 = dup2(r3, r2) write$binfmt_aout(r4, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, 0x0, 0xa, r4, 0x12) perf_event_open(&(0x7f00000002c0)={0x0, 0x80, 0x80, 0x40, 0x4, 0x1f, 0x0, 0x81, 0x80000, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={&(0x7f00000001c0), 0x7}, 0x100, 0x9, 0x3, 0x4, 0x10001, 0x5cc3ce58, 0xffff, 0x0, 0x10001, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) munlockall() 13:00:05 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 74) 13:00:05 executing program 3: r0 = syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r3, r2, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, 0x6, &(0x7f0000000580)=[{&(0x7f0000000280)="f1b1aa237d19b8fe757e6be887e5a0cc8072f53fa721f2897f", 0x19, 0x7fff}, {&(0x7f00000002c0)="47735ad7158be2a8fac00c1cfca5a6af36c3b2d5af9ebfd91ce2c87225038bc7da5f", 0x22, 0x4}, {&(0x7f0000000300)="ea6dc92a1b8e27f8fd8bfd4b33395c2340874cb22a61531d8d41d736ca2807b319389dca12f8d2bcae3998d7ed5054d374f3760dad221c0694f1ad0ba7e3383d6f0c6126b5796ca25c6c55f05a6f9902dc8a66f86b0d23750e27b14f96543268455833ce4d5485fa25444c82c4e08b4c69724f1cebb9d41a96c3178ebe843ac3a6dd679a540371ea3918eb4fca1f72062b12f8df125e5fbda63d11ce0f6c9d16ff7cc639a238a2f004c21dbdb89d6f1fcde700e8ce909bb0f383e46370f50339c0aa2ad277bafa914b906c741e168e57047622e403bf35169d593980cc5828", 0xdf, 0x7}, {&(0x7f0000000400)="68f2c4f6fe0a85539686ad30b300add7c94ea11233380498e2c6a342c30a9ded4f9bea61a5fdefd9cfb7da5cceda5ec38812e042ee809e8ef5292831fd14c8f1e318e4e23eba02df2f1575498fd3592f1e93189f251e00", 0x57}, {&(0x7f0000000480)="0fc111f20885094843d2dac107d9c3dd5e8970948d8355e3abd2bfb89f8a3600379b69744f7d109e2f803455a03b96b3482b4082106f84c3ae7aa1a2ac8abdd3ca3ffb974c5f37eb3baae22df3f4480367de3246b3153f2ddb818247015cc1ac02373a2fa7ba0ad33aa33e5dba9b898d4504ca7270796808d78d5cadd4c4ef9723b8d8825b5620", 0x87, 0x6}, {&(0x7f0000000540)="7dc7f8ad092d56241998f8507dccac57f22ec45d885b334b673517c533bef6a05960df74a833f05ba9df4c87a2", 0x2d, 0x4}], 0x1040400, &(0x7f0000000640)={[{@nr_blocks}], [{@pcr={'pcr', 0x3d, 0x31}}, {@smackfsdef}, {@dont_measure}, {@euid_gt={'euid>', r2}}]}) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000740)=0x6e, 0x80000) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000017c0)={'batadv_slave_1\x00', &(0x7f0000000780)=@ethtool_perm_addr={0x20, 0x1000, "4904241e5136c38d18cde1981fbe9c9705ff0b1a6b2a2d6e728ebf93df5fef3ed284a09132dab052a18e1a20c66668c33bb579816ea45e1d644a13864bb38ce1d222619a051fd64e5dfb843fba9af6547e7a6c64e0264984c70f771e81ccdb0739655cda164e47e8bb67ffddf3406c5d21b47158e7bdcacf1859911ccf0d215b650a8e1303d65312db14cacd7f3f8fa90d431544786ed77383732ddb3a7b0fb0e3c999e6f911daad1c34b5a5deec5b8c23444cbf50d2efe3d69b9cb7a67d56dc3e0be5b47bcdcccbbf265019f9fd93f66772abbd92b578a02cebd5240560204518710f0479809dde97f9b6d37b5287f715b07aefba6d5f020d8e36e2bfc7412099f9a8149d5cd68d0435b2a35662a7ff91428f7ec827a05b52af2c683f69697888b5d566d7d506bb05a3aa6f6280100573f748c6bb7b4e7519e8016543bbd9049daa9267f08b9a3771922dc8c2e20f6b7f3c0c54da7cdb31b4167bf12cb2dedd3303af0a66d2f9871b641d921b021021cb63523ddf20f43282547ba1dc79b50fc4b78f74b5cfa705f5374384678322537945719611f29ee0e7e0bc8530dca9a0321fb46bf1592f5b2ffd2b956dc44da0178ca2c14ab44e6dd189b8e3ee020ba6726268708dc42aaae653b14d7427a4333035f06df9ab7bec7f11a94a7f1fa2dc00deaa3e65ec5285f39173913907074a1e6d6ce743ceb263060cc50a13e97c5437289110aeeed48e01b97d5c2fa9035b2a5da81a75e53d9caaa460453374e08e31f5a170a6f94e764150a91aa757bd9fd6d2c5e8ceda432b1a85e402718e8add1191060dd2407bd5026fceac898d138e2842cd281588c2f0d4519a75e55760596fa35b5e8a9e0af4ff95af9bb0c94ae3dc3e1e1b3493406c16daf8fdf20b40e3a66bf58517907296c09c754107453df0c53d39fd1914ed0b5008be8e37f465f575dbdf76b6e740fbdc6c1f76202731281b9e8395913addf76ba71cad6149cb87057466b80f929d09d4d167ab235b5f2d5ae3ba4f2e589442047870815b96830a3dbe48f3444dbd570149de298a0fc9af20162222ad3d60d6f9206dae0d48b7ea14b85365f91d7bcf98bcb1a4f66f76a09883e8e1e29dd2aa2a9d7123d9858641660f1123e842b0fdc2fbbd5a43c76a4701ddb334251e997a621674ae7bc89cd510e5d63e686bb9da25d1585f54f985a08e8b80c17b3142886338528e73caaeac88d1576b85ec15c62686f4f1d78d57f19cfe2223862bf95ca32cfdee051a41d299b2a4f5f03a4f450fc04a5a7d0311b4daee32b10065058c7ec101b8fde149da9b57a52a89b34b5f9e7dd18071475fe4318230b9f39218f412575e4c29ff04642bcba8ea678ac2f85c893938af726b96eb58b246d904c41f5e50724425d96a23e4e9586f1fd55d897a47fdd8047ee9fd4fae5559e5e32da537becf0f0634b0fbced581137bdc988fd425b5db725ae9cf76b6799e1a478a4d58509fa0a60215e80201f375a50c48b9fedcebe64b7eb8b677577d0bce642f300e6c463d7ae5a46b25ab1c182178a48d0bd6a8aeb68213bb427ccd190d1acfbfe7ebdb6c49d14dbdc91f9b2fb04fbf4442e19581377626d80a30eccc50c288c06a87cc2866b81c88e73d6fc81cd4a23bac4d46a545c2b918a55e9a72d0346669caf4c3bbe908e12245e1fc04f17b3b08fb4c6e8a451070721d6880bbb34ba41fb038f2b6d8d1a1cf888ce0bb57fe86188ac1f20e1573e2e1a24ae7dd7ea7f7d9d354862c43f0561102e0ddc9d64c9a85bcd3927a8962c92f611ee672830ce0ae9238d635cc69735fd92e250b4126de09115734f036375ccb9a526a124e58d40436f0d217243ee1ef43dd6f8931b7515f1fbffbc3fc052f6fccbd5021ce3a4f4c316e5d467ccf88f675c04bc1588cbb3079ed95d04c4395c48148cdc956814e9ead7884b6f66e6d277496e2c73689e9677b998fd1dbbf71e640b1007dcc82faeae1b4056f06beb88de71b53d40f00c04bbc28e210efd0001d669a7295e7b64e055221fbc26ee297c9fd7b9d02de890e8b3b235417b46fa96faec6a2773534049f414edae255f3bdf84474d305a7c811cba6a42aca442fc33dceabb066e6515a2a4488b0f72857467c934740d718ceec06991daf042f55a531003591de2fdcd91947be8c8f5bd33d648707486f25ce6b7f2b63b8477c2c4ea4e109e8199e5a1af1616fa35eef3b9c8896433cd29d1051308d7028828a90d5cc47f524488df5d7b0b09203219c67281459252d70f62cc3c9942f4761c466cdd8a5ca1a31a48531f3ee49fd9c05fc3e649a025b48a6ef1122c46353f610e03de4dded35fc0ec1d642b71b3a35d4f0a874e73427a68a153cf8c6cd9a50eebf742fe4642622383e31cfb702655cf6943b26c882b3930e8c435adbfacfb245819eda46cb95aa1cad49f676168f9de8022c738f49f653c7f5784780d6cf12587bccc728314124c830897c5272cd908360b8aa7b3d73cc3a898c07778b2ef6bae26febdb2dba100b7e38b7fa5cd9990d1078eb13fc3a835a6be4d566b549d2a0cc455acd07c2fcbbcaee1cb81e1a90181efcd731c1c440172472a4b2537eb9d2d21c3fd27d20bb7994e92485149c6b73e0a1d8ad25bffb95287a9384420c8d8466968a324097b07dd7da55016a6414cb38c5a607cbd65b57838f424a233a34d461c8d9b60515aaa17af34813977b7835f2cf81c24c7666b46020f602b3df363b036075323855f5e0d9616e672414172077b5eaef2f267eaef46fabbd4dd3b2a08b58bd6e954b09155d2af0d35fb1c520b2a812712992cc330614c48f05e86b5d5ae86d248fc7c2d5c1e05afb8546d5d01109b3e37c065025887b45a43482bd61837d1e44edd35b82898fde28734e9cd852ac6d67782f98991a0a73db4f748d08b67f26b2b67470b85f0a252341979ec65ec48acfa00d6ac4cc9594c1e2e95ec0dc5bca82e128ab91724fb72d634ba711194fb08613553989669b83423518cbc11812a20e3f03efd76f41c15210d26860c2cb1e917bb0bd7fe95606b9bab1e1401adca6afefe574b57174f0b2ee822a6f70ea5f1cf3d7b3baf3ab81b83b1905090abf1777e695035c8c11d18806d47c9d6318ba9a5fa84c22a4a3f59dae86d97ded4f5bb40960cb04dfe75ef4bae9d8afdfeff3c0cadef1f8277fee542756c1a65e9786ffa625a18e0948cce0c93bbc5c06cfcfa14c3552d812b9a72895d634954541ed18099e3e8e565733480a9178519da946a1f881e1e7c5e46ad9f725931d772cf239fd224c46e31081896bed5d9035290e6fa8093b6631a68bfcf253f01a9225edbb11c4d59b4e49e8078e736cbf7886d608f6ad63341e79c6435b59068980052add402361b7c11e96e01bce26dc3904259f48c35d5abc44a7779be27334a61d982653776b876e050e24d34bcaff3df10e687430fd992816274430a855fd8cafbddd3cae5048a418309555a78de6aae36c3d36e22b2bd7209513949359e234ee4bfa31102523fcfaa46002c25111439456268b65b74e932232822feebd3a77b8a5f8d5747f6cec6f9385cfa08cb476df59d2760dda02af004b7fc00076c0bc7b0107f742162b398021cb3cadf7ab4a2f311d3f884d33fd0114801cbd3104aa5a18dced01963e12b6b7ca8abd4645c6899e1cccc955525ba8a08771d64ab878a34e9e376bdffc468ca11142c824022346096ac161e95d1694ed1c894cd4f03d96cbc4db5130ecc4fca13991f7325835ee6ca20dd9bd7cc234f9e555a9d7dc5b5fb6db13b87bbd65e267e80e3aa9d1f930ec3833be3c381d02c6f10e320ba65b0773ef911fc26fe9df438a90d8b96e4c3c36d0327638b7e3285a65ae2168a6f84df1ac4126ba9a6d9972a5e6fcf31bad537fc6aaee8f0f7a02b35e12e3036beeea43460b001a29c384d52004595e2e24d6d499cf892f73176d28ce9fd4a996738e5640687a696613808851543c9ddad8771660b04364bace2f1ed051152ae5faa5e43a7d0a8d2c1b5cf5cf6af46c10f39e1ae2badefabebe010adf214c63a4dd4d8944416e575f9b27886ac22e32518848449bd48943f1b6eeb437e8765d6a43115e120800f03fb54adcf8ae029d719a8338c345bd39f6d02ed6995f2515a985282769c55920a08c43be64d2b2390d066acf5ee44e1ead63f1de5a3cff543bf6e7ecfefd09598b81050a54647af1832d310f6a9df454e0e9af239fe396613a74761a77f3942dfad579097534d4fda1aa1dec396f9f8076de14100d88593199384579d33e1676fe14882786a9dce3405cfc53b776089a4240eac806c85a56eadde1b4114820d1d38b48037d752dba547ae0cb8d2293a64086a8931ce4ad1fd2c823714870d66661b4738f2093a3276e7951cc6f9f3559214f4dde25bd272ee4c99996f0563a4be62d5187da7fad00d984361fff511c70065fe6a6486a39eeefcd8a503bddeab57c71d8baf0e4df22a89a742e9d9b5634ee41cacaf8b5e00648ccb25f25c5dcfc4cad88f96056a66bdc322344f4331aac7b482dca303a1d6bb2b0540906c9c44b653904022122600178810051ad5fe767701f6f2294a0396b2e1af8f6ebbbcee118dd8be9b59615ee9728e0192850b010f02fce5e5e1e0bb1590160f9fff2eb5ce65946fd1f47312a2aca247ead917b4e9301da7a35b9b5833e48d0ebe4d738788322847458de82c9a22713b1e68780d7b4fce5aeb19fded3b3a16b8c0cb3dc2e13d9f84e7919d8c8cd2547ea1c3700e5e16368d2a104960f1558bd97d76fba5f1ca5256ee27e1b5553bb9d32667985ad6353562027ae28447467da768879bb828487e738fa850813c666e3ea017f42a584ac90a80b060fc41c4e7eafaca829824f4a369935ed22f0fae6e7951a04bf9abb4db8671aacb94a4829bc6786628b7a48a3d1978c5e6c6ef3faf5efdd900cb50153ee3cea9880cb448ae0135aae50271cbafc67d0963eab05b252bc3ba8f5c4b247b32449daacbe74bf504ade8271509d33ed3231115818b7c3d1bede4e1198bfd738a0391e9c6c2111b6227cb6ea07cf990b2fdeb0aa38b170573a89d82b196133462358ef40bc3d19418aa47bb57bad2e055be2869c807dd18ea5fbab33530d28ea06d7d34a7200139f1a2932adfff96a8aef7c7ee7d76b11ab750ee00afc9f076e2b373dd50533346faf7a874b5938ab57d49554697dbe543367991b1ffb092d1a041da8a4dadce9d72b5bd7e6a35af73bb03baf2d7d3e6e1aee4fe2014ad29d285c565c1c06ba937dd7ec544fa5c80dd592e7c8ac93ce7e49bbb9a2d392da2f4a1902c64c5b3b7d4b31cdc8458927d90edf20c9ba2865b9b87eaeb0e23f68e685f41db09d8778b712778118a542713a40137aef4589f19704447ef82eed99cafd1d6d4e7c0ac90cccd887a29a76d2c4d959c39a1f15ee21626482631d5b263fbb9fd0181bd953a96642f657b943f6ed1cfbba6eded7e51e326adb558ba5aa7b8d637aee37f581ddca8e97e70719ac5325094d08fd743c25914caca4814100d4e4c0a83102261f3cfc904c47588d1f237cc70ab906782d47e55636fb5f00551e59087374271c1f2ae0401a754a33d5027c941df570710023d3f4625cbcc706c2c9ddb5d2be42d6fb05f25d09411ef0f70b0bda72b26fc158c5e3517201b2f91f2dfc410f0c21fba9f5d13575255719c267459f0ad913c11f684cb00f6ec935b7821ae5308ed677e3696526d83331899f80bae240a1986d5f4c2c7b41b2618f29a25bc0343a8db2adff8aa7097376906a628a7cdabc6f05befbaa"}}) recvfrom$unix(r4, &(0x7f0000001800)=""/58, 0x3a, 0x40, &(0x7f0000001840)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x400, 0x140) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="3c0000002e2f66696c6550dc89ca6ab77c37d3f627ea26e88dbb77501f9daeab9a3e2f5c50da6ee85da9e9df2338f53d8079deecfc15493f772cb5c01760204a83ae5441c332c973d4adec5df3304e6b9ccc892fd5c9db26418cb663d4fb31afb32225dccfea13ccc16c94d2c0a49b0dc60c6292cf8074a5eb1ad4be3eb5f607963bea47e7ab629dc94c9dae5de06dd29d25354f32c4d8882b8432663d55527cfddf5ac8261cae0dfb96f9db96"]) [ 3176.005026] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 3176.048032] Invalid option length (1047482) for dns_resolver key [ 3176.058356] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 3176.061167] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3176.061167] program syz-executor.1 not setting count and/or reply_len properly [ 3176.063769] FAULT_INJECTION: forcing a failure. [ 3176.063769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3176.064672] CPU: 1 UID: 0 PID: 52062 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3176.064693] Tainted: [W]=WARN [ 3176.064697] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3176.064705] Call Trace: [ 3176.064710] [ 3176.064716] dump_stack_lvl+0xfa/0x120 [ 3176.064742] should_fail_ex+0x4d7/0x5e0 [ 3176.064761] _copy_from_iter+0x1dc/0x1660 [ 3176.064779] ? __pfx_perf_trace_preemptirq_template+0x10/0x10 [ 3176.064795] ? do_raw_spin_lock+0x123/0x260 [ 3176.064813] ? __pfx__copy_from_iter+0x10/0x10 [ 3176.064827] ? find_held_lock+0x2b/0x80 [ 3176.064845] ? __create_object+0x59/0x80 [ 3176.064864] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3176.064882] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3176.064895] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3176.064914] copy_page_from_iter+0xe3/0x180 [ 3176.064932] bio_copy_from_iter+0x108/0x270 [ 3176.064957] blk_rq_map_user_iov+0xc07/0x1180 [ 3176.064982] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3176.065004] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3176.065022] ? find_held_lock+0x2b/0x80 [ 3176.065039] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3176.065053] ? lock_release+0xc8/0x290 [ 3176.065066] ? import_ubuf+0x1be/0x220 [ 3176.065082] blk_rq_map_user_io+0x1cf/0x200 [ 3176.065103] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3176.065122] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3176.065143] ? irq_work_queue+0x9c/0x100 [ 3176.065161] ? __asan_memset+0x24/0x50 [ 3176.065177] sg_common_write.constprop.0+0xd75/0x1710 [ 3176.065196] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3176.065209] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3176.065225] ? ___ratelimit+0x465/0xa10 [ 3176.065247] sg_write.part.0+0x6a2/0xb50 [ 3176.065261] ? __pfx_sg_write.part.0+0x10/0x10 [ 3176.065276] ? perf_trace_lock+0xb5/0x5d0 [ 3176.065292] ? __pfx_perf_trace_lock+0x10/0x10 [ 3176.065310] ? lock_acquire+0x15e/0x2f0 [ 3176.065324] ? perf_trace_lock+0xb5/0x5d0 [ 3176.065337] ? find_held_lock+0x2b/0x80 [ 3176.065354] ? get_pid_task+0xfd/0x250 [ 3176.065368] ? perf_trace_lock+0xb5/0x5d0 [ 3176.065384] ? avc_policy_seqno+0x9/0x20 [ 3176.065395] ? selinux_file_permission+0x99/0x600 [ 3176.065415] sg_write+0x86/0xe0 [ 3176.065427] vfs_write+0x2b7/0x1150 [ 3176.065439] ? __pfx_sg_write+0x10/0x10 [ 3176.065451] ? lock_acquire+0x15e/0x2f0 [ 3176.065464] ? __fget_files+0x34/0x3b0 [ 3176.065477] ? __pfx_vfs_write+0x10/0x10 [ 3176.065489] ? __fget_files+0x203/0x3b0 [ 3176.065501] ? lock_release+0xc8/0x290 [ 3176.065517] ? __fget_files+0x20d/0x3b0 [ 3176.065534] ksys_write+0x121/0x240 [ 3176.065547] ? __pfx_ksys_write+0x10/0x10 [ 3176.065566] do_syscall_64+0xbf/0x360 [ 3176.065579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3176.065592] RIP: 0033:0x7efff4616b19 [ 3176.065602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3176.065618] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3176.065631] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3176.065639] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3176.065647] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3176.065654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3176.065661] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3176.065678] [ 3176.120433] loop3: detected capacity change from 0 to 127 [ 3176.141514] loop3: detected capacity change from 0 to 127 13:00:15 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x1ff) 13:00:15 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) keyctl$link(0x8, 0x0, r0) 13:00:15 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000040), 0x7, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r4}}]}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000085c0)={0x0, 0x0, 0x0}, &(0x7f0000008600)=0xc) syz_mount_image$tmpfs(0x0, &(0x7f0000000600)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}, {@gid={'gid', 0x3d, r6}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {0x1, 0x6}, [{0x2, 0x4, 0xee01}], {0x4, 0x3}, [{0x8, 0x5, r4}, {0x8, 0x2, r5}, {0x8, 0x2, 0xee01}, {0x8, 0x0, r6}, {0x8, 0xf896428aedfd4c20, 0xffffffffffffffff}], {}, {0x20, 0x6}}, 0x54, 0x0) 13:00:15 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x20, 0x1) mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) renameat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') 13:00:15 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) 13:00:15 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 75) 13:00:15 executing program 5: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000140)={0x3, 0x4, 0xfffffffa, 0x3, 0x5}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) r3 = dup2(r2, r1) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x120) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x57, 0x8, 0x9, 0x81, 0x0, 0x6, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x4, @perf_config_ext={0x6, 0x3}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0xb5, 0x0, 0x2, 0x0, 0x2}, r0, 0xa, r3, 0x12) capset(&(0x7f0000000180)={0x20071026, r0}, &(0x7f00000001c0)={0xa0e, 0x5, 0x1000, 0x80000000, 0x8479, 0xd4a}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 13:00:15 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/4096, 0x1000) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) [ 3186.385128] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3186.385128] program syz-executor.1 not setting count and/or reply_len properly [ 3186.392575] FAULT_INJECTION: forcing a failure. [ 3186.392575] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.393463] CPU: 1 UID: 0 PID: 52380 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3186.393483] Tainted: [W]=WARN [ 3186.393486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3186.393494] Call Trace: [ 3186.393498] [ 3186.393503] dump_stack_lvl+0xfa/0x120 [ 3186.393530] should_fail_ex+0x4d7/0x5e0 [ 3186.393550] should_failslab+0xc2/0x120 [ 3186.393566] __kmalloc_noprof+0xc8/0x6e0 [ 3186.393585] ? __pfx_blk_rq_append_bio+0x10/0x10 [ 3186.393603] ? bio_copy_from_iter+0x192/0x270 [ 3186.393626] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3186.393648] ? blk_rq_map_user_iov+0x1fd/0x1180 [ 3186.393665] blk_rq_map_user_iov+0x1fd/0x1180 [ 3186.393690] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3186.393711] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3186.393731] ? find_held_lock+0x2b/0x80 [ 3186.393749] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3186.393763] ? lock_release+0xc8/0x290 [ 3186.393776] ? import_ubuf+0x1be/0x220 [ 3186.393793] blk_rq_map_user_io+0x1cf/0x200 [ 3186.393813] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3186.393832] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3186.393854] ? irq_work_queue+0x9c/0x100 [ 3186.393872] ? __asan_memset+0x24/0x50 [ 3186.393887] sg_common_write.constprop.0+0xd75/0x1710 [ 3186.393906] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3186.393919] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3186.393936] ? ___ratelimit+0x465/0xa10 [ 3186.393958] sg_write.part.0+0x6a2/0xb50 [ 3186.393972] ? __pfx_sg_write.part.0+0x10/0x10 [ 3186.393986] ? perf_trace_lock+0xb5/0x5d0 [ 3186.394003] ? __pfx_perf_trace_lock+0x10/0x10 [ 3186.394020] ? lock_acquire+0x15e/0x2f0 [ 3186.394034] ? perf_trace_lock+0xb5/0x5d0 [ 3186.394047] ? find_held_lock+0x2b/0x80 [ 3186.394065] ? get_pid_task+0xfd/0x250 [ 3186.394080] ? perf_trace_lock+0xb5/0x5d0 [ 3186.394095] ? avc_policy_seqno+0x9/0x20 [ 3186.394106] ? selinux_file_permission+0x99/0x600 [ 3186.394127] sg_write+0x86/0xe0 [ 3186.394139] vfs_write+0x2b7/0x1150 [ 3186.394153] ? __pfx_sg_write+0x10/0x10 [ 3186.394165] ? lock_acquire+0x15e/0x2f0 [ 3186.394178] ? __fget_files+0x34/0x3b0 [ 3186.394191] ? __pfx_vfs_write+0x10/0x10 [ 3186.394203] ? __fget_files+0x203/0x3b0 [ 3186.394215] ? lock_release+0xc8/0x290 [ 3186.394230] ? __fget_files+0x20d/0x3b0 [ 3186.394248] ksys_write+0x121/0x240 [ 3186.394261] ? __pfx_ksys_write+0x10/0x10 [ 3186.394280] do_syscall_64+0xbf/0x360 [ 3186.394293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3186.394306] RIP: 0033:0x7efff4616b19 [ 3186.394315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3186.394327] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3186.394340] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3186.394348] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3186.394356] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3186.394363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3186.394370] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3186.394388] 13:00:15 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x4000, 0x20) [ 3186.458427] 9pnet_fd: Insufficient options for proto=fd 13:00:15 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) uname(&(0x7f0000000400)) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) [ 3186.481152] 9pnet_fd: Insufficient options for proto=fd [ 3186.536588] Invalid option length (1047482) for dns_resolver key 13:00:26 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(0x0, 0x4000, 0x20) 13:00:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 76) 13:00:26 executing program 3: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0xc0ed0000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',obj_type=\'{]{L]$,fsuuid=8a272f13-c995-9509-d1a9-6507bcad,hash,euid<', @ANYRESDEC, @ANYBLOB=',fsuuid=d08b8803-f123-bfb6-66fe-6d5U1ae9,smackfshat=debugfs\x00,\x00']) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r5, &(0x7f00000001c0)={[0x3]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r4, &(0x7f0000000040)='./file0\x00', 0x2) pipe2(&(0x7f0000000040), 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r7 = syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0xb6fdd4, 0x5, &(0x7f0000001700)=[{&(0x7f0000000480)="771522891a1b81835f68fc4644a35d81a5350f209a57cd0814bcaa5797b3deaefe6a2f0d1a1c5ff5b3a27ef136ec6f6a7e978b97a428209bd50d3c63e62e577ec45a17ecd12b1f4906c2535a84a9742b77df7ae038f8dd333a719fa3bb66b93b568c4927de5542b8b280db09b5c597f3548c0d03f7f851974e33e86e50fe1b38a772075aa45eaf4dc5511d6f4aec351353bb52c4aa5e33470423c3704be4eb81cac9a879e026d297eb7ab1a3ba3bbdb798db6389da03474fae68cec827e8c16b9b5d5ac58c393f204c33203674041842de457dc7cce248b5bb81ab92cc18061d1f2e431182c3e6f24f7f9b3e726a79dfbe", 0xf1, 0x7}, {&(0x7f0000000280)="dfe7749256c7ac137ac91830eaff87642161bf017c8f0829aa7efd8deb7cdc40d08b671ecb920c5dedaeabff333f88c6b96ec0f489ae355fc6f8e732bdbaea1e1806e071bfcaa15cd19e9c7526e94f61d4c8f80378bd87e7e1a7a3de936a53492e486ac881800c17a091c3fee154b18a3c6e2afd7ceb170f644617017e869ab3da9dc0fb5db7214fb8fed50e2ecde2809f47704020f4f0b7f3a1f00f6764a9f6f07c350af7b025ce5be88a8a4f24dae0d8c27c30b4c4822f052eaf", 0xbb, 0x5}, {&(0x7f0000000580)="59b7f734afc3930ed580ba473942b069b138efc7d7a5fdb449b46bd568cc7412c2a3a2e82f03e300284efeba4a5dc828d572489201fb10d7ed72d47f28a1bbc50d8e46e90f14ead4b4dd2b7ad70182b46c", 0x51, 0x100}, {&(0x7f0000000600)="afa3a65bcd38c0d020378ced0bf2a1876c0faff88f5082b196ea4264e65ee273d42ee4a2ce95224896333cfccd153c0e3664435031de1adfb427479789f5bd5d09a17f6bf5f1805f0addaffffd0330bef914edb3b12a8fae6cde02b24cb0b15e55ae5dc547e7c5c2b05a9a15799454321ede7b4e55598ff6e7cd229fe7439679364e69b78edbaa566f7772b5120b8dc13b87adafb943d7b9b46bdc9caed5c9c3832c571551786637976dffd9bb4f568ed18d506216dc5b0e7c8f270450a111cc79", 0xc1, 0x2e3}, {&(0x7f0000000700)="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", 0x1000, 0x8}], 0x20060, &(0x7f0000001780)={[{@hide}, {@map_normal}, {@check_relaxed}, {@block={'block', 0x3d, 0x800}}, {@sbsector={'sbsector', 0x3d, 0x8000}}, {@map_off}], [{@obj_user={'obj_user', 0x3d, 'fd/3\x00'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}]}) preadv(r7, &(0x7f0000001b00)=[{&(0x7f0000001800)=""/201, 0xc9}, {&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/83, 0x53}, {&(0x7f0000001a00)=""/216, 0xd8}], 0x4, 0x1, 0x7) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f0000000180)=0x2, 0x4) 13:00:26 executing program 0: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchown(r2, r1, 0x0) chown(&(0x7f0000000000)='./file0\x00', r1, 0xffffffffffffffff) 13:00:26 executing program 5: getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)=""/94, &(0x7f00000001c0)=0x5e) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@sha1={0x1, "31721a4c3f3487ba4049b7f682595c8a27224140"}, 0x15, 0x2) 13:00:26 executing program 7: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) 13:00:26 executing program 6: ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000480)={0x4, 0x86, 0x2, 0x9, 0x2, [{0x5, 0x2, 0x0, '\x00', 0x18f}, {0x40, 0x108, 0x8, '\x00', 0x1}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x60000) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000080)) r2 = dup2(r1, r0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="00002abd7000fddbdf2507000000080001001100000008000500070000000a00180003030303030300000a00180003030303030300000a001800030303030303000005005300010000000400cc0014000400766972745f7769666930000000000000050053000100ddff"], 0x70}}, 0x24000401) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x48, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2b, 0xe, {@wo_ht={{0x0, 0x3}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r6, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40001) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x1) 13:00:26 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) uname(&(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3dd58fe2f28bcdffd085119b6910c7cd64f01b6d909e03d1c9ff903be56a124922bdef31053949d2dbb9070ec3e864156456d68102513a4f17b9f01c10e425ae1ac32f21f349210cff27a9a60ecdfa1f87d31c696732437bf884c2b8d088fbc0e7cbf642985013c75f8a20bbc4ec9a04ff0da701a41ae8096363f043cf4fedb7b875bf3de17676890cfa9d18a5fbbbc42f3be589d540513dce650871a83fc7df830259651ee4c7d0f379c09db55847ce9270b5229b15fa13ba107400", 0xfffff, r1) perf_event_open(&(0x7f0000000340)={0x4, 0xfffffffffffffedd, 0xf0, 0xde, 0x5, 0x10, 0x0, 0x3f, 0x80138, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x7}, 0x1200, 0x0, 0x80000001, 0x9, 0x3, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x1ff) poll(&(0x7f0000000140)=[{}], 0x1, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz1\x00', 0x1ff) clone3(&(0x7f0000005880)={0x7b804100, 0x0, &(0x7f0000000280), 0x0, {0x1e}, 0x0, 0x0, &(0x7f0000000240)=""/10, 0x0}, 0x58) munlockall() munlockall() 13:00:26 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(0x0, 0x4000, 0x20) [ 3197.689529] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3197.689529] program syz-executor.1 not setting count and/or reply_len properly [ 3197.719827] Invalid option length (1047482) for dns_resolver key [ 3197.760414] 9pnet_fd: Insufficient options for proto=fd 13:00:27 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(0x0, 0x4000, 0x20) 13:00:27 executing program 5: write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)={{0x107, 0x3, 0xff, 0x1d0, 0x80, 0x4, 0x4c, 0x3}, "a4c56712e3f7a59b7bafce97a7a3ea42b2952ad296a5400181108e7ada1f2f756cea20402a98d978debc22e597dc26604a6cdddcbba51f7491c0f1c29143dbf37764898f3dc3f5b22adcf3141259c440e4f86bfb4822b7fcc8ae0d133b242597226d7c6c07829fadc34c51039fe75fade012e95fdf808a3a724d81f9910e94f2f0b925cee57681efde1334a45ec10cb9a7c94072e2e0b9c3c6a9dda20e741979b6c4b65e85586d83117920f73fab52a2cf02e77053897eb95cd6f9", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9db) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000000)) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x7, 0x8000, 0x82, 0x9, 0x101, 0x800}) lsetxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) 13:00:27 executing program 7: r0 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) [ 3197.840030] loop3: detected capacity change from 0 to 23422 13:00:27 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40001) dup2(r1, r0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b017cc50f03"], 0x2b6) (fail_nth: 77) 13:00:27 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5c3feb33dbb4946e06000000"], 0x1a) dup2(r1, r0) [ 3197.924283] sg_write: data in/out 747/652 bytes for SCSI command 0x0-- guessing data in; [ 3197.924283] program syz-executor.1 not setting count and/or reply_len properly 13:00:27 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) recvmmsg$unix(r2, &(0x7f0000001e40)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/222, 0xde}, {&(0x7f00000002c0)=""/31, 0x1f}, {&(0x7f0000000300)=""/254, 0xfe}], 0x3, &(0x7f0000000440)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f00000004c0)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000540)=""/61, 0x3d}, {&(0x7f00000023c0)=""/84, 0x54}], 0x2, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000680), 0x6e, &(0x7f0000002080)=[{&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000001700)=""/185, 0xb9}, {&(0x7f00000017c0)=""/154, 0x9a}], 0x3, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001a80)=""/176, 0xb0}, {&(0x7f0000001b40)=""/247, 0xf7}, {&(0x7f0000001c40)=""/181, 0xb5}], 0x3}}, {{&(0x7f0000001d40), 0x6e, &(0x7f0000002040)=[{&(0x7f0000001f80)=""/128, 0x80}, {&(0x7f00000022c0)=""/249, 0xf9}, {&(0x7f0000002000)=""/20, 0x14}], 0x3, &(0x7f0000001e00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x5, 0x40016000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_open_dev$vcsn(&(0x7f0000001dc0), 0x8000, 0x8c400) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000002100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000020c0)={&(0x7f0000002140)=ANY=[@ANYBLOB="afc7e68798867f4a23a31e8245da6561c9f77c4fc838cdec7b8ebc7cc6c578ffc8079d6c0457cb48fb4e57558668db7a81ce1f47ce9ef7f865218bbf9a634cba8a26618256fcd5bad7970ac7eaab6a440f", @ANYRES16=0x0, @ANYBLOB="000026bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r2, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r3, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r4, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c00040000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x24040081}, 0x20000004) syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) [ 3197.933124] FAULT_INJECTION: forcing a failure. [ 3197.933124] name failslab, interval 1, probability 0, space 0, times 0 [ 3197.934032] CPU: 1 UID: 0 PID: 52886 Comm: syz-executor.1 Tainted: G W 6.17.0-rc4-next-20250902 #1 PREEMPT(voluntary) [ 3197.934052] Tainted: [W]=WARN [ 3197.934056] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3197.934064] Call Trace: [ 3197.934071] [ 3197.934076] dump_stack_lvl+0xfa/0x120 [ 3197.934102] should_fail_ex+0x4d7/0x5e0 [ 3197.934118] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 3197.934135] should_failslab+0xc2/0x120 [ 3197.934151] __kmalloc_noprof+0xc8/0x6e0 [ 3197.934169] ? trace_kmalloc+0x1f/0xb0 [ 3197.934183] ? __kmalloc_noprof+0x29d/0x6e0 [ 3197.934199] ? bio_kmalloc+0x3e/0x70 [ 3197.934214] ? bio_copy_from_iter+0x192/0x270 [ 3197.934237] ? bio_kmalloc+0x3e/0x70 [ 3197.934250] bio_kmalloc+0x3e/0x70 [ 3197.934264] blk_rq_map_user_iov+0x390/0x1180 [ 3197.934289] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 3197.934310] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3197.934330] ? find_held_lock+0x2b/0x80 [ 3197.934347] ? sg_common_write.constprop.0+0xc36/0x1710 [ 3197.934362] ? lock_release+0xc8/0x290 [ 3197.934374] ? import_ubuf+0x1be/0x220 [ 3197.934391] blk_rq_map_user_io+0x1cf/0x200 [ 3197.934411] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 3197.934430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3197.934452] ? irq_work_queue+0x9c/0x100 [ 3197.934469] ? __asan_memset+0x24/0x50 [ 3197.934484] sg_common_write.constprop.0+0xd75/0x1710 [ 3197.934503] ? __pfx_sg_common_write.constprop.0+0x10/0x10 [ 3197.934516] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 3197.934533] ? ___ratelimit+0x465/0xa10 [ 3197.934555] sg_write.part.0+0x6a2/0xb50 [ 3197.934568] ? __pfx_sg_write.part.0+0x10/0x10 [ 3197.934583] ? perf_trace_lock+0xb5/0x5d0 [ 3197.934599] ? __pfx_perf_trace_lock+0x10/0x10 [ 3197.934621] ? lock_acquire+0x15e/0x2f0 [ 3197.934635] ? perf_trace_lock+0xb5/0x5d0 [ 3197.934647] ? find_held_lock+0x2b/0x80 [ 3197.934665] ? get_pid_task+0xfd/0x250 [ 3197.934679] ? perf_trace_lock+0xb5/0x5d0 [ 3197.934695] ? avc_policy_seqno+0x9/0x20 [ 3197.934705] ? selinux_file_permission+0x99/0x600 [ 3197.934726] sg_write+0x86/0xe0 [ 3197.934738] vfs_write+0x2b7/0x1150 [ 3197.934751] ? __pfx_sg_write+0x10/0x10 [ 3197.934763] ? lock_acquire+0x15e/0x2f0 [ 3197.934776] ? __fget_files+0x34/0x3b0 [ 3197.934789] ? __pfx_vfs_write+0x10/0x10 [ 3197.934801] ? __fget_files+0x203/0x3b0 [ 3197.934812] ? lock_release+0xc8/0x290 [ 3197.934828] ? __fget_files+0x20d/0x3b0 [ 3197.934846] ksys_write+0x121/0x240 [ 3197.934859] ? __pfx_ksys_write+0x10/0x10 [ 3197.934878] do_syscall_64+0xbf/0x360 [ 3197.934890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3197.934904] RIP: 0033:0x7efff4616b19 [ 3197.934913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3197.934926] RSP: 002b:00007efff1b8c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3197.934939] RAX: ffffffffffffffda RBX: 00007efff4729f60 RCX: 00007efff4616b19 [ 3197.934947] RDX: 00000000000002b6 RSI: 0000000020000300 RDI: 0000000000000003 [ 3197.934955] RBP: 00007efff1b8c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3197.934962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3197.934969] R13: 00007fff80878bff R14: 00007efff1b8c300 R15: 0000000000022000 [ 3197.934987] 13:00:27 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) open$dir(&(0x7f0000001600)='./file0\x00', 0x0, 0x20) 13:00:27 executing program 7: r0 = add_key$keyring(0x0, &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r1, 0x0, 0x0) keyctl$link(0x8, r0, r1) [ 3198.068463] 9pnet_fd: Insufficient options for proto=fd [ 3198.074246] 9pnet_fd: Insufficient options for proto=fd [ 3198.572084] 9pnet_fd: Insufficient options for proto=fd VM DIAGNOSIS: 13:05:27 Registers: info registers vcpu 0 RAX=000000000132bebf RBX=0000000000000000 RCX=ffffffff84bbe5f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c8304 RBP=dffffc0000000000 RSP=ffffffff85a07e00 R8 =0000000000000001 R9 =ffffed100d9c630a R10=ffff88806ce31853 R11=0000000000000001 R12=ffffffff8643b450 R13=1ffffffff0b40fc7 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bbd31e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55d7000 00000000 00000000 LDT=0000 fffffe0100000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561788166b90 CR3=0000000013864000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=0000000000000000429905ca99c0e800 XMM02=00000000000000003fde666666666666 XMM03=00000000000000003fde666666666666 XMM04=00000000000000003fda6fc62cb7e125 XMM05=000000c00005b9e0000000c00005b9b0 XMM06=00000000000000003fd3333333333333 XMM07=00000000000000003fd0000000000000 XMM08=00000000000000003f8312e9eea87800 XMM09=0000000000000000bfddcdcf16f122a6 XMM10=00000000000000003f999999999999a0 XMM11=000000c00005a450000000c00005bbc0 XMM12=000000c0000a42c0000000c00005bbf0 XMM13=696d20636578650d006e656720636578 XMM14=6e696820636578650a00657a696d696e XMM15=0000736465657320636578650a007374 info registers vcpu 1 RAX=000000000091a0ed RBX=0000000000000001 RCX=ffffffff84bbe5f7 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff814c8304 RBP=dffffc0000000000 RSP=ffff888009717e58 R8 =0000000000000001 R9 =ffffed100d9e630a R10=ffff88806cf31853 R11=0000000000000001 R12=ffffffff8643b450 R13=1ffff110012e2fd2 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff84bbd31e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56d7000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5669574010 CR3=0000000013864000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000411cc9e000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000